After we upgraded to Splunk 6, our folder structure went away in the Dashboards tab. Is there a way to group the dashboards in a way so they aren't all listed? Our users generally know what squad created the dashboard but usually don't know the actual name nor who owns it. Please help and thanks in advance.
You would have to updated your navigation xml for the app.
By default it is listing all the dashboards. If you want to display some specific views, you can either hardcode the name or provide some matching term for dashboard names.
Not sure why your navigation would have disappeared completely. I'd like to hear more about how you had things structured so we could sort that out. But here is how the navigation works in 6.0.
As Administrator you select the App in question then:
Settings> User Interface> Navigation Menus > default.xml
The editor will come up and the default version of the file looks like this:
<nav searchview="search" color="#65A637">
<view name="search" default='true' />
<view name="datamodels" />
<view name="reports" />
<view name="alerts" />
<view name="dashboards" />
So a few changes we see are that the searchview is no longer "flashtimeline" it is now called "search". That refers to what you get when you click on a value and drilldown to search. And you see the color setting. That's any html style hexidecimal color and it will change the top banner and the app window color on the home screen.
The next items, the "view names" those are the default views that come with Splunk, but they're still views. "search" is the standard search page and by default, it is set as the app default. If you want a dashboard or an intro page (maybe a dashboard with an html panel, or a dashboard saved as html) you either put it first, or you deliberately mark it as default=true no matter where it is in the list. In this case it happens to be first and marked...
These default views are sitting right on the menu bar. so adding another < view name = "mydashboard" /> will plant it directly on the menu bar. If you don't want people seeing all the available Dashboards, but only the specific ones you enable in a dropdown collection then just remove the entry.
The rest is pretty much the same as the previous version. as somesoni2 said, you can display hard coded specific views, or if you have a good naming convention, you can use the match facility to have Splunk display only the views that match a particular pattern.
Best thing to do is to pick an app that has a complex menuing system and deconstruct it to see what they've done. that's what I do to learn this stuff. 🙂