All Apps and Add-ons
Highlighted

Default Alerts dashboard replaced by Splunk app for *nix

Communicator

Hi guys,
I've created my custom Splunk Application.
After that I've installed the Splunk App for unix and linux I noticed that the default Alert dashboard (which lists the configured alerts defined by app) has been replaced by the one defined in Splunk App for unix and linux

My data/ui/nav/default.xml is the following:

<nav search_view="search" color="#345790">
 <view name="home_view"  default='true'/>
  <view name="view1" />
  <view name="view2" />
  <view name="alerts" />
  <view name="reports" />
  <view name="search" />      
  <view name="dashboards" />
  <view name="datasets" />
</nav>

but If I click on alerts the following dashboard appears:
alt text

Also in the Dahsboard view I see that there is a Dashboard called "Alerts" defined by splunkappfor_nix

How can I configure my data/ui/nav/default.xml to load the default Alerts dashboard in my Customized application instead of the one defined by splunkappfor_nix ?

Thanks

alt text

0 Karma
Highlighted

Re: Default Alerts dashboard replaced by Splunk app for *nix

Communicator

no one can help me?

0 Karma
Highlighted

Re: Default Alerts dashboard replaced by Splunk app for *nix

Splunk Employee
Splunk Employee

This appears to be an issue with the global export permissions on the splunkappfor_unix taking precedence over the default navigation options of the barebones template used in your custom app:
Splunk internal engineering reference = TAG-12427

Workaround:
Settings/User Interface/Views
Fix the Unix app permission from "Global" to "App only".

Settings/User Interface/Navigation Menus
Fix the Unix app permission from "Global" to "App only".

Bump the server.

View solution in original post

Highlighted

Re: Default Alerts dashboard replaced by Splunk app for *nix

Influencer

Looks like this isn't limited to Unix App. Any app that has global permissions for the nav bar will override the search/default/data/ui/nav/default.xml nav bar.

We had several apps with this problem. We had to both change the share permissions to App for all navs and set the permissions for the search app nav to Global to resolve the issue.

0 Karma
Highlighted

Re: Default Alerts dashboard replaced by Splunk app for *nix

Explorer

Also had this problem, and this solved it for me! grazie!

0 Karma
Highlighted

Re: Default Alerts dashboard replaced by Splunk app for *nix

Explorer

This fixed my issue. Thank you so much. I literally spent about 10 hours trying to solve this.

0 Karma
Highlighted

Re: Default Alerts dashboard replaced by Splunk app for *nix

Explorer

Now that I turned that off, I don't get the fields for the Nix search. I suspect that's because change the permissions to app only kills the field extractions.

0 Karma