Splunk Dev

Set custom values to do comparisons between indexed data and fixed values

changux
Builder

Hi all. I have an application that shows some dashboards with statistical tables based on indexed data. I want to create a setup section where any user setup custom values (for example forecast), to: 50. Next, i want to compare results in some fields of the statistical tables against this fixed value to establish the fulfillment of a goal.
I found some information about setup.xml or app.conf but i don't know the better way. Any help?

0 Karma

gcusello
SplunkTrust
SplunkTrust

You could store values in a kvstore or in a lookup table
Bye.
Giuseppe

0 Karma

changux
Builder

Thanks. To do in a lookup table, any suggested method? Any app?

0 Karma

gcusello
SplunkTrust
SplunkTrust

I usually use Lookup editor.
Bye.
Giuseppe

0 Karma

sundareshr
Legend

You can create a dashboard where user can enter this value and run a query that compares this values. In addition, you can store this user entered value in KVStore (http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZK) to persist this value

0 Karma

changux
Builder

Thanks. But the "way" is using the setup.xml?

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...