Installation

Custom Dashboards get deleted during Splunk upgrade

KavyaSabu
Explorer

Is there a way to avoid the custom dashboards from getting wiped out after a Splunk upgrade or a Deployment Server restart? I tried the excludeFromUpdate option in the serverclass.conf file of the deployment server, but want to know if there is any other solution apart from that.

Labels (1)
0 Karma

keerthana_k
Communicator

We finally fixed the issue by moving the app configurations to the default directory and letting customers use local directory for creating dashboards. Additionally, we have added excludeFromUpdate option for the local directory.

0 Karma

strive
Influencer

Splunk puts its configurations under default directory and we are advised to add our configs under local directory.

If you have created a splunk app for aiding custom dashboard creation, then you should put your configurations under /default directory. That way when you provide further upgrades to the app, the end user created dashboards will stay unaffected.

Adding excludeFromUpdate is not the solution. This may stop you from providing updates to the app that you have created.

0 Karma

keerthana_k
Communicator

Hi Strive,

We have already separated the default configurations into the default directory. We want to add excludeFromUpdate on top of that.

0 Karma

strive
Influencer

If the path is going to be till directory level then that should be ok.

By the way putting things under default directory alone was not sufficient?

0 Karma

keerthana_k
Communicator

just moving things to default directory might work in case of new installations and not on existing upgrade ones. So we need to use a combination of both putting configurations in default directory and adding excludeFromUpdate for the local directory.

0 Karma

strive
Influencer

If you are going to continue maintaining the local directory in your app then fine. If the solution is going to be taking out local fully and maintaining only default in the app, then it makes sense once to test without including excludeFromUpdate

0 Karma

keerthana_k
Communicator

We did that and it didn't work. Hence this approach.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Upgrading Splunk should have no effect on your custom dashboards unless you put them in $SPLUNK_HOME/etc/system/default against all advice.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...