I'm currently developing a Splunk app and am having trouble bundling saved searches to appear in the Search & Reporting app.
My intention is to include a list of searches in my app package (in savedsearches.conf or elsewhere) that will appear in the Reports tab of S&R. I've done some digging but haven't found a solution that works.
Is this possible? I'm developing in Splunk Enterprise 9.1.3.
By default, reports in your app are shown in your app. To have them appear in the S&R app the reports must be shared globally and the Reports dashboard must be set to show reports from all apps. Or your report must be shared within your app and the S&R Reports dashboard must be set to show reports from your app.
--- If this reply helps you, Karma would be appreciated.
By default, reports in your app are shown in your app. To have them appear in the S&R app the reports must be shared globally and the Reports dashboard must be set to show reports from all apps. Or your report must be shared within your app and the S&R Reports dashboard must be set to show reports from your app.
--- If this reply helps you, Karma would be appreciated.
Do you have an example of what it looks like to share a search globally? I've read lots of forum posts and Splunk Docs but haven't gotten a clear answer on how to configure this in the .conf file.
