Splunk Dev

Set custom values to do comparisons between indexed data and fixed values

changux
Builder

Hi all. I have an application that shows some dashboards with statistical tables based on indexed data. I want to create a setup section where any user setup custom values (for example forecast), to: 50. Next, i want to compare results in some fields of the statistical tables against this fixed value to establish the fulfillment of a goal.
I found some information about setup.xml or app.conf but i don't know the better way. Any help?

0 Karma

gcusello
SplunkTrust
SplunkTrust

You could store values in a kvstore or in a lookup table
Bye.
Giuseppe

0 Karma

changux
Builder

Thanks. To do in a lookup table, any suggested method? Any app?

0 Karma

gcusello
SplunkTrust
SplunkTrust

I usually use Lookup editor.
Bye.
Giuseppe

0 Karma

sundareshr
Legend

You can create a dashboard where user can enter this value and run a query that compares this values. In addition, you can store this user entered value in KVStore (http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZK) to persist this value

0 Karma

changux
Builder

Thanks. But the "way" is using the setup.xml?

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...