Splunk Search

How to implement custom menu in Searches & Reports?

freephoneid
Path Finder

Hi,

When I click "Searches & Reports", it shows me Project1, Project2 & Project3 menu & then within these menus, I've different queries related to it.

/myapp/default/data/ui/nav/default.xml is as shown below:

<collection label="Searches &amp; Reports">
     <collection label="Project1">
        <saved source="unclassified" match="project1_" />
    <collection>
    <collection label="Project2">
        <saved source="unclassified" match="project2_" />
    <collection>
    <collection label="Project3">
        <saved source="unclassified" match="project3_" />
    <collection>
</collection>

This is working fine but I want more granularity & I want to have 2 more menus under each of these Projects as shown below:

Searches and Reports - Project1 - Project1 Regular Queries
Searches and Reports - Project1 - Project1 Summary Queries    
Searches and Reports - Project2 - Project2 Regular Queries
Searches and Reports - Project2 - Project2 Summary Queries
Searches and Reports - Project3 - Project3 Regular Queries
Searches and Reports - Project3 - Project3 Summary Queries

My symmary queries starts with summary_project1_... & regular queries starts with project1_...

I tried changing default.xml as shown below but it is showing only Searches & Reports -> Project1 -> Project1 Regular Queries & even this menu is empty & summary queries are not shown at all, menu is not showing that option at all.

<collection label="Searches &amp; Reports">
    <collection label="Project1">
        <collection label="Project1 Regular Queries">
            <saved source="unclassified" match="project1_" />
        </collection>           
        <collection label="Project1 Summary Queries">
            <saved source="unclassified" match="summary_project1_" />
        </collection>
    </collection>
    <collection label="Project2">
        <saved source="unclassified" match="project2_" />
    </collection>
    <collection label="Project3">
        <saved source="unclassified" match="project3_" />
    </collection>
</collection>

How can I create these sub menus so that I can move my summary & regualr queries in respective menus?

Thanks!

1 Solution

Ayn
Legend

As per the following docs section, Splunk unfortunately doesn't seem to support more than two levels of nesting in menus: http://docs.splunk.com/Documentation/Splunk/latest/Developer/Step6BuildNavigation#Nested_menus

View solution in original post

0 Karma

Ayn
Legend

As per the following docs section, Splunk unfortunately doesn't seem to support more than two levels of nesting in menus: http://docs.splunk.com/Documentation/Splunk/latest/Developer/Step6BuildNavigation#Nested_menus

0 Karma

freephoneid
Path Finder

Ahh...thats bad...Hopefully newversion will support more levels!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...