navigation menu consolidation

[aaronkorn]

Hello,

What is the best way to edit the navigation menu dropdowns to contain sub-elements. For example we would want to group certain searches and dashboards under particular categories like this under Errors:

[okrabbe_splunk · Accepted solution]

You would want to edit a navigation.

http://docs.splunk.com/Documentation/Splunk/5.0.2/AdvancedDev/BuildNavigation

Just to give you an idea, the way they were able to get the views with "error" to appear is by adding a collection with a "match=error". This then matches views that have error in the name.

<collection label="Saved Searches">
<saved name="Daily indexing volume by server" view="charting" />
  <collection label="Errors">
    <saved source="unclassified" match="error" />
  </collection>
<saved source="unclassified" />
</collection>

[okrabbe_splunk]

Unfortunately there is no easy way to do this outside of having a naming convention for your views.

See this answer:
http://splunk-base.splunk.com/answers/12744/navigation-menu-xml-match-help

[aaronkorn]

This worked. Thanks! How would you specify multiple match strings?

[okrabbe_splunk]

Ah, so I just realized that the matching appears to happen in order. So for example, unless you move the "view source=unclassified" down below the Cerner match you will still see them once at the top and once in the matched group.

[aaronkorn]

Yep. Any other ideas?

[okrabbe_splunk]

The code looks good...I am surprised that is not working. You have done a restart and clear out your browser cache?

[aaronkorn]

Yes I have a view called Cerner RTMS and it is being grouped under the matched collection but is still an option under the main drop-down

Manage Views

Create dashboard...

[okrabbe_splunk]

My past experience has been when it matches it should show up only under the matched collection. Are you seeing something different?

[aaronkorn]

Excellent! Thank you!!! One question though.. How do I remove the original view from the list once it has been added to a grouping?