Splunk Enterprise

Where are edits to the navigation menu from settings -> user interface and editing using dashboard editor saved?

gjanardh
Explorer

Will Editing navigation menu from settings -> user interface and editing using dashboard editor save the updated default.xml in nav folder and views in apps\default\data\ui\views folder?

If not, where are the changes persisted to?

Thanks

0 Karma
1 Solution

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

View solution in original post

Michael
Contributor

Also, accessible via the GUI under: Settings, User Interface, Navigation menus... (v7.*)

0 Karma

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

gjanardh
Explorer

Thank you! Will changes made to files under default be picked up upon restart?

0 Karma

elliotproebstel
Champion

Splunk configuration file precedence is pretty complicated, but this page does a good job of detailing it:
http://docs.splunk.com/Documentation/Splunk/7.0.0/Admin/Wheretofindtheconfigurationfiles

Values in the local folder will take precedence over values in the default folder. Generally speaking, unless you are the developing an app for distribution, you are advised to not make changes to the default folder. Changes you make in the local folder will persist through app updates, but changes you make in the default folder will generally get wiped out if you update an app.

0 Karma

gjanardh
Explorer

Thank you!

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...