I recently upgraded Splunk Enterprise from version 9.1.0.2 to 9.3.1, and I've encountered an issue where the menu bar is no longer visible in the Search and Reporting UI.
Issue Details:
Screenshots:
Before Upgrade (9.1.0.2)
After Upgrade (9.3.1)
Request: Is there a way to restore the traditional menu bar in the Search and Reporting window?
Thank you
Haven't noticved any particular error in splunkd.log / UI-access logs
Could you please check if the default.xml exists under %SplunkHome%/etc/apps/search/default/data/ui/nav/?
Hi,
Yes it is there
[root@ nav]$ ls -la $SPLUNK_HOME/etc/apps/search/default/data/ui/na
-r--r--r--. 1 svc-splunk eb-svc-splunk 235 Oct 9 10:29 default.xml
Content
<nav search_view="search" color="#5CC05C">
<view name="search" default="true" />
<view name="analytics_workspace" />
<view name="datasets" />
<view name="reports" />
<view name="alerts" />
<view name="dashboards" />
</nav>
Okay, have you checked the internal logs on the affected instance for any WARN or ERROR events especially during a reboot?
I have checked in splunkd.log, haven't noticed any particular error or warning related to this. also web-ui log