Dashboards & Visualizations

Edit Form/Dashboard XML manually , Splunk does not refresh unless XML edited through GUI

DanMurad
Explorer

It seems I can't edit dashboard and form XML's using my own editor. Upon saving, Splunk does not refresh (probably because it reads from DB cache instead of file?), how can I force it to read the file every time it changes because I'd like to use my own IDE instead of the splunk xml editor.

Thanks,

Tags (3)

stevewillson
New Member

Restarting with 

 

 

http://debug/refresh

 

 

 worked when editing files outside of Splunk Enterprise 8.0.6.

 

If I edit the file directly in (\default\data\ui\views\) and then click on the App in the upper left corner of the screen under 'Apps', the display content for the modified file is not updated.

Confirming what @DanMurad posted.

 

0 Karma

devicenul1
Path Finder

Yes, I tried both the reload all objects and just views ... the views one doesn't work, the all objects one will sometimes work.

0 Karma

nfilippi_splunk
Splunk Employee
Splunk Employee

Did you try the reload endpoint as listed below? After doing this reload, we need to refresh the dashboard page.

http://:/debug/refresh

0 Karma

devicenul1
Path Finder

I'm having this exact same problem with Version 6.1.1 ... Any other ideas here, I've tried everything listed but it will not refresh custom dashboards. Doing a ?showsource=1 shows the out of date code.

0 Karma

nfilippi_splunk
Splunk Employee
Splunk Employee

You can reload these from disk using the following endpoint(s).

To reload all objects:
http://:/debug/refresh

To reload views only:
http://:/debug/refresh?entity=%2Fdata%2Fui%2Fnav&entity=%2Fdata%2Fui%2Fviews

Ayn
Legend

All views in the app are refreshed when you access the app's start URL ( .../apps/yourapp ). You can just click the app logo at the top left corner in your app in splunkweb to achieve the same thing.

Ayn
Legend

That is exactly what I mean. The methods I describe work perfectly for refreshing on the Dplunk instances I've used.

0 Karma

DanMurad
Explorer

This is incorrect. It does not refresh. I hope you understand when I say edit the xml I mean editing the file /opt/splunk/etc/apps//local/data/ui/views/.xml

0 Karma

DanMurad
Explorer

It would have been tolerable if Save button didn't exit everytime making you find and click the view name again to edit it.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...