Knowledge Management

Where is the Location of knoweldge objects in the Backened?

zacksoft
Contributor

I  am a developer and I have crated a  splunk dashboard using simpleXML. 
The entire code must be saved in the backened in some .conf file is what I believe.
Can anyone guide me where can I find it / the folder path ( like opt/etc/user/ ......??????? )

On the same question, I too would like to know the location where my Scheduled Reports, Alerts, Macros etc..are stored.

Thank you.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

See https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/#How-configuration-settings-are-s... for a primer.

Dashboards, a.k.a "views", are not stored in .conf files.  They're in .xml files in $SPLUNK_HOME/etc/apps/<app>/local/data/ui/views or $SPLUNK_HOME/etc/users/<user>/<app>/local/data/ui/views.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

See https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/#How-configuration-settings-are-s... for a primer.

Dashboards, a.k.a "views", are not stored in .conf files.  They're in .xml files in $SPLUNK_HOME/etc/apps/<app>/local/data/ui/views or $SPLUNK_HOME/etc/users/<user>/<app>/local/data/ui/views.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...