Reporting

Navigation Menu: Why are saved searches are not opening in the customized view?

dorilevy
Path Finder

Hey,

According to the splunk documentation for navigation (http://docs.splunk.com/Documentation/Splunk/6.2.1/AdvancedDev/BuildNavigation#Build_the_navigation_X... ) the default.xml file supports "view" attribute for "saved" tag. This should make the saved search open in a different view. I tried using it, but I can't seem to make it work (check the new view):

<nav>
    <a href="search">Home</a>
  <collection label="General">
        <collection label="Reports">
                <saved source="unclassified" match="General" view="newview" />
                <view source="unclassified" match="General"/>
        </collection>
  </collection>
</nav>

Am i missing something?

Dori

0 Karma

NOUMSSI
Builder

Hi Dori,

Here is the mistake that you make:

The first option taht i propose to you is: If you want to use the option match in the tags saved and/or view, his value most be equal to one name of your saved searches that exists.

The second option is very easy: Just remove this match="General" in those tags.

0 Karma
Get Updates on the Splunk Community!

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...