Developing for Splunk Enterprise

Set custom values to do comparisons between indexed data and fixed values

Builder

Hi all. I have an application that shows some dashboards with statistical tables based on indexed data. I want to create a setup section where any user setup custom values (for example forecast), to: 50. Next, i want to compare results in some fields of the statistical tables against this fixed value to establish the fulfillment of a goal.
I found some information about setup.xml or app.conf but i don't know the better way. Any help?

0 Karma

Legend

You could store values in a kvstore or in a lookup table
Bye.
Giuseppe

0 Karma

Builder

Thanks. To do in a lookup table, any suggested method? Any app?

0 Karma

Legend

I usually use Lookup editor.
Bye.
Giuseppe

0 Karma

Legend

You can create a dashboard where user can enter this value and run a query that compares this values. In addition, you can store this user entered value in KVStore (http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZK) to persist this value

0 Karma

Builder

Thanks. But the "way" is using the setup.xml?

0 Karma