topic Re: Which config file has details of what a Splunk Web UI menu contains and how to edit items listed in that menu? in Security

Which config file has details of what a Splunk Web UI menu contains and how to edit items listed in that menu?

xvxt006 — Sun, 22 Mar 2015 13:59:48 GMT

Hi,

which config file has details of what a menu contains? if i have custom menus, how do i make some of the items go into that menu?

bjoernjensen — Sun, 22 Mar 2015 14:04:42 GMT

Hi,

I think you want to make changes in this file:
$SPLUNK_HOME$/etc/apps/myApp/local/data/ui/nav/default.xml

or maybe in this one (iff you develope your own app):
$SPLUNK_HOME$/etc/apps/myApp/default/data/ui/nav/default.xml

Cheerz - B

Let's say all your alerts within an app have an identifying prefix alrt_. Then you can add an dynamic sub menu using this entry:

... <collection label="Alerts"> <saved source="all" match="alrt_" /> </collection> ...

xvxt006 — Sun, 22 Mar 2015 14:13:01 GMT

Thank you. i see it the menu items. But i don't see items what that menu contains.
For example i see - but i don't see what all alerts it contain..

bjoernjensen — Sun, 22 Mar 2015 16:40:20 GMT

As mentioned in the docs you can add dynamic sub menus, also for alerts. I extended my answer with en edit. Hope this helps.