Splunk Enterprise

Where are edits to the navigation menu from settings -> user interface and editing using dashboard editor saved?

gjanardh
Explorer

Will Editing navigation menu from settings -> user interface and editing using dashboard editor save the updated default.xml in nav folder and views in apps\default\data\ui\views folder?

If not, where are the changes persisted to?

Thanks

0 Karma
1 Solution

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

View solution in original post

Michael
Contributor

Also, accessible via the GUI under: Settings, User Interface, Navigation menus... (v7.*)

0 Karma

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

gjanardh
Explorer

Thank you! Will changes made to files under default be picked up upon restart?

0 Karma

elliotproebstel
Champion

Splunk configuration file precedence is pretty complicated, but this page does a good job of detailing it:
http://docs.splunk.com/Documentation/Splunk/7.0.0/Admin/Wheretofindtheconfigurationfiles

Values in the local folder will take precedence over values in the default folder. Generally speaking, unless you are the developing an app for distribution, you are advised to not make changes to the default folder. Changes you make in the local folder will persist through app updates, but changes you make in the default folder will generally get wiped out if you update an app.

0 Karma

gjanardh
Explorer

Thank you!

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...