Splunk Enterprise Security

Navigation editor in Enterprise Security not working properly - is there a .conf file?

echojacques
Builder

Hello,

I'm running Splunk 6 and Enterprise Security 3. I'm having several problems when attempting to edit the default ES navigation menu (configure > general > navigation):

  1. I cannot add a "new collection" which is a new menu item. I can name it but then the new name doesn't get saved. I also cannot drag any items (unused reports) into it.
  2. I cannot rename any collections (the changes do not get saved).
  3. Moving a collection/menu item or anything around in the editor is very difficult, if not impossible. The item or collection you are trying to move, moves around the screen erratically and very quickly, too quick to have any control of where you are moving an item to.

I've tried IE and Firefox and have the same problems in both. Although, problem #3 is somewhat alleviated in IE.

So my question is, is there a .conf file (or another file) that I can edit to modify the navigation menu manually since I'm having trouble making the edits in the UI's navigation editor?

Thanks!

0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, sorry to hear about that. The file is SplunkEnterpriseSecuritySuite/local/data/UI/navigation.xml (from memory).

View solution in original post

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, sorry to hear about that. The file is SplunkEnterpriseSecuritySuite/local/data/UI/navigation.xml (from memory).

echojacques
Builder

Thanks! With your help, I found it in:
SplunkEnterpriseSecuritySuite/local/data/ui/nav/default.xml

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...