Security

Update 4.3 user apps to 6.2 UI - Help me

cpetterborg
SplunkTrust
SplunkTrust

We have a number of user apps (container apps) that were created for our initial install of 4.3. We have replaced the 4.3 with a new install of Splunk 6 (migrating the indexed data, etc.). We copied the apps from the 4.3 servers to the 6 servers, and so the apps have the old 4.3 UI. There are lots of searches, eventtypes, etc. in these apps, so we don't want to just make a new app and then try copying or moving these elements to the new 6 apps.

So my question is this: Is there a way to easily make these apps use the new 6.2 UI instead of the old 4.3? Like by modifying the contents of a couple of files for each app?

We no longer have the 4.3 servers, so I can't go back and do anything on those old servers to help. But if I could even copy the app from the Splunk6 installation, and put it on a 4.3 server (newly installed), and then do an upgrade of some kind to 6.x, then that would be easier than trying to recreate the apps by hand.

Old UI:
alt text

New UI:
alt text

1 Solution

cpetterborg
SplunkTrust
SplunkTrust

I was supplied with the best way to do this, so I'm going to go ahead and provide the answer to my own question.

Go into Setting > User Interface > Navigation Menus, then select one of the app contexts for an app that has the newer UI, and then select the UI (usually titled default). Select the XML code and copy it to your clipboard. Then go back to the UI for the app that you want to update and paste it into the XML textbox for that app and save it. That should update the interface. You can start from that point to do any modifications that you like to the menus.

View solution in original post

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

I was supplied with the best way to do this, so I'm going to go ahead and provide the answer to my own question.

Go into Setting > User Interface > Navigation Menus, then select one of the app contexts for an app that has the newer UI, and then select the UI (usually titled default). Select the XML code and copy it to your clipboard. Then go back to the UI for the app that you want to update and paste it into the XML textbox for that app and save it. That should update the interface. You can start from that point to do any modifications that you like to the menus.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...