(splunk 4.2) A true newbie question. If I am using advanced xml to build a dashboard, can it be edited in the UI? Or must I upload files to the splunk server?
Assuming I have to push a view file, will changes be recognized immediately, or is there a view reload cmd that has to be invoked?
You can go to Manager > User interface > Views to create/view advanced XML views. Once the page is refreshed in Splunk you should be able to see your changes. There is also an open action from the Views page so you can make a change and look at your page to test it.
You can go to Manager > User interface > Views to create/view advanced XML views. Once the page is refreshed in Splunk you should be able to see your changes. There is also an open action from the Views page so you can make a change and look at your page to test it.
Correct, you can paste in your advanced XML and then you'll have to edit it from Manager only and not in the Dashboard UI.
The xml I see in Manager > User interface > Views is simplified xml. Splunk will recognize the advanced version if I replace the simplified xml? And from then on I no longer have the option to do GUI editing of the dashboard. Thanks.
the thing is that once the view is not in simple xml, or is using a form, then you cannot edit the xml from the button in the view, and have to go through the manager.