Splunk Dev

Set custom values to do comparisons between indexed data and fixed values

changux
Builder

Hi all. I have an application that shows some dashboards with statistical tables based on indexed data. I want to create a setup section where any user setup custom values (for example forecast), to: 50. Next, i want to compare results in some fields of the statistical tables against this fixed value to establish the fulfillment of a goal.
I found some information about setup.xml or app.conf but i don't know the better way. Any help?

0 Karma

gcusello
SplunkTrust
SplunkTrust

You could store values in a kvstore or in a lookup table
Bye.
Giuseppe

0 Karma

changux
Builder

Thanks. To do in a lookup table, any suggested method? Any app?

0 Karma

gcusello
SplunkTrust
SplunkTrust

I usually use Lookup editor.
Bye.
Giuseppe

0 Karma

sundareshr
Legend

You can create a dashboard where user can enter this value and run a query that compares this values. In addition, you can store this user entered value in KVStore (http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZK) to persist this value

0 Karma

changux
Builder

Thanks. But the "way" is using the setup.xml?

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...