Splunk Dev

Set custom values to do comparisons between indexed data and fixed values

changux
Builder

Hi all. I have an application that shows some dashboards with statistical tables based on indexed data. I want to create a setup section where any user setup custom values (for example forecast), to: 50. Next, i want to compare results in some fields of the statistical tables against this fixed value to establish the fulfillment of a goal.
I found some information about setup.xml or app.conf but i don't know the better way. Any help?

0 Karma

gcusello
SplunkTrust
SplunkTrust

You could store values in a kvstore or in a lookup table
Bye.
Giuseppe

0 Karma

changux
Builder

Thanks. To do in a lookup table, any suggested method? Any app?

0 Karma

gcusello
SplunkTrust
SplunkTrust

I usually use Lookup editor.
Bye.
Giuseppe

0 Karma

sundareshr
Legend

You can create a dashboard where user can enter this value and run a query that compares this values. In addition, you can store this user entered value in KVStore (http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZK) to persist this value

0 Karma

changux
Builder

Thanks. But the "way" is using the setup.xml?

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...