Splunk Search

How to implement custom menu in Searches & Reports?

Path Finder

Hi,

When I click "Searches & Reports", it shows me Project1, Project2 & Project3 menu & then within these menus, I've different queries related to it.

/myapp/default/data/ui/nav/default.xml is as shown below:

<collection label="Searches &amp; Reports">
     <collection label="Project1">
        <saved source="unclassified" match="project1_" />
    <collection>
    <collection label="Project2">
        <saved source="unclassified" match="project2_" />
    <collection>
    <collection label="Project3">
        <saved source="unclassified" match="project3_" />
    <collection>
</collection>

This is working fine but I want more granularity & I want to have 2 more menus under each of these Projects as shown below:

Searches and Reports - Project1 - Project1 Regular Queries
Searches and Reports - Project1 - Project1 Summary Queries    
Searches and Reports - Project2 - Project2 Regular Queries
Searches and Reports - Project2 - Project2 Summary Queries
Searches and Reports - Project3 - Project3 Regular Queries
Searches and Reports - Project3 - Project3 Summary Queries

My symmary queries starts with summaryproject1... & regular queries starts with project1_...

I tried changing default.xml as shown below but it is showing only Searches & Reports -> Project1 -> Project1 Regular Queries & even this menu is empty & summary queries are not shown at all, menu is not showing that option at all.

<collection label="Searches &amp; Reports">
    <collection label="Project1">
        <collection label="Project1 Regular Queries">
            <saved source="unclassified" match="project1_" />
        </collection>           
        <collection label="Project1 Summary Queries">
            <saved source="unclassified" match="summary_project1_" />
        </collection>
    </collection>
    <collection label="Project2">
        <saved source="unclassified" match="project2_" />
    </collection>
    <collection label="Project3">
        <saved source="unclassified" match="project3_" />
    </collection>
</collection>

How can I create these sub menus so that I can move my summary & regualr queries in respective menus?

Thanks!

1 Solution

Legend

As per the following docs section, Splunk unfortunately doesn't seem to support more than two levels of nesting in menus: http://docs.splunk.com/Documentation/Splunk/latest/Developer/Step6BuildNavigation#Nested_menus

View solution in original post

0 Karma

Legend

As per the following docs section, Splunk unfortunately doesn't seem to support more than two levels of nesting in menus: http://docs.splunk.com/Documentation/Splunk/latest/Developer/Step6BuildNavigation#Nested_menus

View solution in original post

0 Karma

Path Finder

Ahh...thats bad...Hopefully newversion will support more levels!

0 Karma