Splunk Dev

Set custom values to do comparisons between indexed data and fixed values

changux
Builder

Hi all. I have an application that shows some dashboards with statistical tables based on indexed data. I want to create a setup section where any user setup custom values (for example forecast), to: 50. Next, i want to compare results in some fields of the statistical tables against this fixed value to establish the fulfillment of a goal.
I found some information about setup.xml or app.conf but i don't know the better way. Any help?

0 Karma

gcusello
SplunkTrust
SplunkTrust

You could store values in a kvstore or in a lookup table
Bye.
Giuseppe

0 Karma

changux
Builder

Thanks. To do in a lookup table, any suggested method? Any app?

0 Karma

gcusello
SplunkTrust
SplunkTrust

I usually use Lookup editor.
Bye.
Giuseppe

0 Karma

sundareshr
Legend

You can create a dashboard where user can enter this value and run a query that compares this values. In addition, you can store this user entered value in KVStore (http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZK) to persist this value

0 Karma

changux
Builder

Thanks. But the "way" is using the setup.xml?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...