Splunk Dev

Deployed a search app from deployer

rashi83
Path Finder

hi ,
I deployed a search app from deployer on 3 member cluster search head. Deployer successful pushed the bundle but its not pushing local directory.

The app got visible on search head but ( its missing search and reporting ) . Its showing only Defaultviews instead of standard ( alert, search , dashboard tabs) .

I checked permission on the deployed app and its set as execute/read/write.

alt text

Tags (1)
0 Karma

manjunathmeti
Champion

By default deployer merges both local and default directories then pushes apps to search heads. Check your changes in default directories on search heads.

It might be something to do with default.xml in your app. Check if following content is there in the default.xml in $SPLUNK_HOME/etc/apps/yourapp/default/data/ui/nav/. If not add it in the app on deployer server, deploy apps again and check.

<nav search_view="search" color="#5CC05C">
  <view name="search" default="true" />
  <view name="reports" />
  <view name="alerts" />
  <view name="dashboards" />
</nav>
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...