I'm following the instruction here to inject my own css in my adv. xml.
so my css lives in search/appserver/static.
But the view is still using the styles in application.css. am i missing something?
here's a snippet of my xml
< view autoCancelInterval="90" isVisible="true" objectMode="SimpleDashboard" onunloadCancelJobs="true" refresh="-1" template="dashboard.html" stylesheet="portal-splunk.css" >
What you want to do is edit application.css directly. Don't worry about including the stylesheet tag like that.
Anything you do in application.css in the appserver/static directory will override any default CSS settings across the APP.
I have done it and it works well, The problem is that you have to set the properties as !important in the "myCustom.css" file.
1°) Be sure to create the "myCustom.css" file and then restart splunk web so it can pick it up
2°) sometimes css properties aren't overrided by the custom css (don't know why), just add the !important tag at the end of the property.
3°) Sometimes even after a refresh the page isn't updated, don't hesitate to bump.
CSS is applied in the order it is read in, some of the HTML in Splunk isn't very well formed and has styling applied in the tags or on the page itself so these require the !important tag as this forces the browser to ignore the order of loading. To avoid bumping just use CTRL+F5 to reload the browser cache