I have different apps with different dashboards and alerts. The goal is to all the app's dashboards in one app which contains all the dashboards and alerts. Is there away to do that. (Note: I am not talking about packaging the apps because I know how to do that). For example, I have Apps called A, B and C with dashboards and alerts; I want all these to be in an App called ex. My_App ?
1.Change the permissions for the original Dashboard to Global.
2.Open your new app, go to Dashboards, look for the Dashboard and Clone it (Edit->Clone), it will clone into the new App.
3.If you don't want the original dashboard to be on the original App you can delete it after being cloned.
To do this , you have :
Set dashboard permissions of the dashboard that you want to copy to global.
In splunk web Follow this Settings - > User interface -> Views -> Permissions
Select your app in Apps context menu , then find your dashboard and click on clone ,you can modify dashboard name if you want .
In splunk web Go to Settings -> User interface -> navigation menu for add dashboard view .
Use this for example
<nav search_view="your app name " color="#0072c6"> <view name="your first view" default='true' /> <view name="your second view"/> </nav>
For alert .
In splunk web Go to Settings-> Searches , report , alerts then set alert permissions of the alerts that you want to copy to global.
In the Apps context menu select your apps then click on clone in the alerts row and modify his name if you want.
First off, any modifications should be made in local folder. So you need to copy your views to Splunk//etc//apps//My_App_Name//local//data//ui//views
Secondly, you must specify navigation for your views in a separate xml in the following path.
the nav xml will be of this form:
<nav search_view="search" color="#0072c6"> <view name="your first view" default='true' /> <view name="your second view"/> </nav>
and so on. Also, this will create a menu item for each view that you specify. You can group them using collections keyword in your navigation xml. You can lookup the documentation for that.
Having said so, this copies all views in to a single application( and not individual dashboards).
Hope this helps.
There should be files for each dashboard in this directory Splunk\etc\apps\My_App_Name\default\data\ui\views. So I copied the same directory of the new app ,but in my case not all of them have it and did not work with me
Well, we have so many dashboards on Production and we are trying to combine all of them in one application. So, copying each code to another it's kind of waste of time. So, I was trying to find an easy way to do it. I tried to copy the dashboard from the app itself but did not work for me; and it's possible that I did something wrong.... Any thought or idea.
Thanks for the response