Splunk Enterprise

Where are edits to the navigation menu from settings -> user interface and editing using dashboard editor saved?

gjanardh
Explorer

Will Editing navigation menu from settings -> user interface and editing using dashboard editor save the updated default.xml in nav folder and views in apps\default\data\ui\views folder?

If not, where are the changes persisted to?

Thanks

0 Karma
1 Solution

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

View solution in original post

Michael
Contributor

Also, accessible via the GUI under: Settings, User Interface, Navigation menus... (v7.*)

0 Karma

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

gjanardh
Explorer

Thank you! Will changes made to files under default be picked up upon restart?

0 Karma

elliotproebstel
Champion

Splunk configuration file precedence is pretty complicated, but this page does a good job of detailing it:
http://docs.splunk.com/Documentation/Splunk/7.0.0/Admin/Wheretofindtheconfigurationfiles

Values in the local folder will take precedence over values in the default folder. Generally speaking, unless you are the developing an app for distribution, you are advised to not make changes to the default folder. Changes you make in the local folder will persist through app updates, but changes you make in the default folder will generally get wiped out if you update an app.

0 Karma

gjanardh
Explorer

Thank you!

0 Karma
Get Updates on the Splunk Community!

New Case Study Shows the Value of Partnering with Splunk Academic Alliance

The University of Nevada, Las Vegas (UNLV) is another premier research institution helping to shape the next ...

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...