It seems I can't edit dashboard and form XML's using my own editor. Upon saving, Splunk does not refresh (probably because it reads from DB cache instead of file?), how can I force it to read the file every time it changes because I'd like to use my own IDE instead of the splunk xml editor.
Thanks,
Restarting with
http://debug/refresh
worked when editing files outside of Splunk Enterprise 8.0.6.
If I edit the file directly in (\default\data\ui\views\) and then click on the App in the upper left corner of the screen under 'Apps', the display content for the modified file is not updated.
Confirming what @DanMurad posted.
Yes, I tried both the reload all objects and just views ... the views one doesn't work, the all objects one will sometimes work.
Did you try the reload endpoint as listed below? After doing this reload, we need to refresh the dashboard page.
http://
I'm having this exact same problem with Version 6.1.1 ... Any other ideas here, I've tried everything listed but it will not refresh custom dashboards. Doing a ?showsource=1 shows the out of date code.
You can reload these from disk using the following endpoint(s).
To reload all objects:
http://
To reload views only:
http://
All views in the app are refreshed when you access the app's start URL ( .../apps/yourapp ). You can just click the app logo at the top left corner in your app in splunkweb to achieve the same thing.
That is exactly what I mean. The methods I describe work perfectly for refreshing on the Dplunk instances I've used.
This is incorrect. It does not refresh. I hope you understand when I say edit the xml I mean editing the file /opt/splunk/etc/apps/
It would have been tolerable if Save button didn't exit everytime making you find and click the view name again to edit it.