Skip to main content
Panel with Embedded KV Editor app icon

Panel with Embedded KV Editor

Editable table over KV store records for classic Simple XML dashboards. Support inline and mass edit. It can have results from a search, a lookup or a mix of both as input. The output kvstore must exist and the _key field must be provided by the input. Added from the visualization picker, configured in the Format menu — no server-side code.Built by LaLaGuy -
splunk product badge

Default Version 1.19.2

August 24, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

Rating
0
(0)

Log in to rate this app

Support
Not Supported

Edit KV store records inside your own classic Simple XML dashboards. KV Editable Table is a custom visualization you add from the visualization picker and configure in the Format menu — no XML, no server-side code. Run a search over a KV store lookup (or over your logs, building the record key yourself) and the panel becomes an editable table: click cells to edit inline (dropdowns, numbers with validation, popup multiline editor, token defaults), press "Select cells" to change a whole column or any set of rows at once, click a header to sort. Rows that have no record yet can be created on Save or with one click, and stored fields are refreshed on Save from the search. The panel, its Format menu, the Help page and the demo speak the language of the dashboard for every locale Splunk ships (English, German, French, Italian, Japanese, Korean, Simplified and Traditional Chinese); field names and values are never translated. Every write re-fetches the record and merges only the edited fields through splunkd's own KV store REST and permissions; a record someone else changed meanwhile is held back; unsaved edits survive search refreshes; only rows shown as unsaved are ever written. Classic Simple XML dashboards only (Dashboard Studio does not load custom visualizations).