Security

Update 4.3 user apps to 6.2 UI - Help me

cpetterborg
SplunkTrust
SplunkTrust

We have a number of user apps (container apps) that were created for our initial install of 4.3. We have replaced the 4.3 with a new install of Splunk 6 (migrating the indexed data, etc.). We copied the apps from the 4.3 servers to the 6 servers, and so the apps have the old 4.3 UI. There are lots of searches, eventtypes, etc. in these apps, so we don't want to just make a new app and then try copying or moving these elements to the new 6 apps.

So my question is this: Is there a way to easily make these apps use the new 6.2 UI instead of the old 4.3? Like by modifying the contents of a couple of files for each app?

We no longer have the 4.3 servers, so I can't go back and do anything on those old servers to help. But if I could even copy the app from the Splunk6 installation, and put it on a 4.3 server (newly installed), and then do an upgrade of some kind to 6.x, then that would be easier than trying to recreate the apps by hand.

Old UI:
alt text

New UI:
alt text

1 Solution

cpetterborg
SplunkTrust
SplunkTrust

I was supplied with the best way to do this, so I'm going to go ahead and provide the answer to my own question.

Go into Setting > User Interface > Navigation Menus, then select one of the app contexts for an app that has the newer UI, and then select the UI (usually titled default). Select the XML code and copy it to your clipboard. Then go back to the UI for the app that you want to update and paste it into the XML textbox for that app and save it. That should update the interface. You can start from that point to do any modifications that you like to the menus.

View solution in original post

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

I was supplied with the best way to do this, so I'm going to go ahead and provide the answer to my own question.

Go into Setting > User Interface > Navigation Menus, then select one of the app contexts for an app that has the newer UI, and then select the UI (usually titled default). Select the XML code and copy it to your clipboard. Then go back to the UI for the app that you want to update and paste it into the XML textbox for that app and save it. That should update the interface. You can start from that point to do any modifications that you like to the menus.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...