topic Re: Add navigation to a Splunk app in All Apps and Add-ons

Add navigation to a Splunk app

francisc — Wed, 19 Jun 2019 08:28:44 GMT

I've added a new view name by editing the default.xml via Splunk Web as an admin, restarted Splunk after and refreshed the instance using /debug/refresh but the new view name is not being added. Is there something i need to do i am missing?

Re: Add navigation to a Splunk app

martin_mueller — Wed, 19 Jun 2019 09:03:35 GMT

Post your navigation XML, and make sure the view id is spelled correctly.

Re: Add navigation to a Splunk app

francisc — Wed, 30 Sep 2020 01:00:23 GMT

<view name="flashtimeline" />
<collection label="Splunk health">
    <view name="license_usage" />
    <view name="data_inputs_health" />
</collection>
<collection label="Access">
    <view name="authentication_summary" default='true' />
    <view name="hp-ux_authentication" />
    <view name="hp-ux_sudo" />
    <view name="aix_authentication" />
    <view name="aix_sudo" />
</collection>
<collection label="Account control">
    <view name="user_account_changes" />
    <view name="user_group_changes" />
</collection>
<collection label="Auditing">
    <view name="cron_jobs" />
    <view name="ssh_non_interactive_commands" />
    <view name="windows_file_audit" />
</collection>
<collection label="Reports">
<collection label="User Audit">
    <collection label="HP-UX">
  <saved source="unclassified" match="HPux_report" />
    </collection>
    <collection label="AIX">
  <saved source="unclassified" match="AIX_report" />
    </collection>
    <collection label="Windows">
       <view name="report1" />
       <view name="report2" />
       <view name="report3" />
       <view name="report4" />
    </collection>
</collection>

<collection label="Searches">
<collection label="**">
  <saved source="unclassified" match="Syslog" />
</collection>
</collection>

The view that i have added is user_group_changes which is not showing on the dashboard.

Re: Add navigation to a Splunk app

martin_mueller — Wed, 19 Jun 2019 09:15:19 GMT

Which view did you add? Did you make sure the view id is spelled correctly?

Re: Add navigation to a Splunk app

francisc — Wed, 30 Sep 2020 01:00:26 GMT

Yes i followed the one on top,

view name changed is user_group_changes from the xml

Re: Add navigation to a Splunk app

martin_mueller — Wed, 19 Jun 2019 13:26:05 GMT

Looks correct to me, the view should appear in the account control collection for users that can see the view.

Re: Add navigation to a Splunk app

VatsalJagani — Wed, 19 Jun 2019 13:42:43 GMT

@francisc - Even you don't need to do debug refresh when you change it from Splunk web.
Just make sure for App you are updating nav in that App only you are checking the navigation.
Make sure navigation permission/visibility is "Only in this App".
By looking at your xml content here, just make sure you have <nav> as root tag in your xml.

Re: Add navigation to a Splunk app

francisc — Thu, 20 Jun 2019 07:47:24 GMT

@VatsalJagani, i did a test using my dev box using a test_app which has the nav tag and i am getting the same results. Sharing is app and permissions are read for everyone and write for admin.

Re: Add navigation to a Splunk app

francisc — Thu, 20 Jun 2019 07:51:04 GMT

@martin_mueller, where do you configure users to see the views.

Re: Add navigation to a Splunk app

VatsalJagani — Thu, 20 Jun 2019 15:59:08 GMT

I'm afraid then it should work. Just to make sure that you are not getting any error while saving the navigation.