Splunk Enterprise

Where are edits to the navigation menu from settings -> user interface and editing using dashboard editor saved?

gjanardh
Explorer

Will Editing navigation menu from settings -> user interface and editing using dashboard editor save the updated default.xml in nav folder and views in apps\default\data\ui\views folder?

If not, where are the changes persisted to?

Thanks

0 Karma
1 Solution

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

View solution in original post

Michael
Contributor

Also, accessible via the GUI under: Settings, User Interface, Navigation menus... (v7.*)

0 Karma

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

gjanardh
Explorer

Thank you! Will changes made to files under default be picked up upon restart?

0 Karma

elliotproebstel
Champion

Splunk configuration file precedence is pretty complicated, but this page does a good job of detailing it:
http://docs.splunk.com/Documentation/Splunk/7.0.0/Admin/Wheretofindtheconfigurationfiles

Values in the local folder will take precedence over values in the default folder. Generally speaking, unless you are the developing an app for distribution, you are advised to not make changes to the default folder. Changes you make in the local folder will persist through app updates, but changes you make in the default folder will generally get wiped out if you update an app.

0 Karma

gjanardh
Explorer

Thank you!

0 Karma
Get Updates on the Splunk Community!

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...

Join Us at the Builder Bar at .conf24 – Empowering Innovation and Collaboration

What is the Builder Bar? The Builder Bar is more than just a place; it's a hub of creativity, collaboration, ...

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...