Splunk Search

How to modify/add sub menu to the Search App - Search & Reports Menu?

jdagenais
Explorer

We are adding more search and report in the "Search & Reports" menu, and I would like to add sub menus such as:

Search Report Charts Queries etc...

Thanks, Jean

Tags (3)
1 Solution

southeringtonp
Motivator

You'll need to edit/override the navigation XML file.

Via the manager, go to User Interface -> Navigation Menus, and click on the "default" entry for the search app.

Or, make a copy of $SPLUNK_HOME/etc/apps/search/default/data/ui/nav/default.xml at $SPLUNK_HOME/etc/apps/search/local/data/ui/nav/default.xml, and edit your changes there.

The format should be reasonably self-evident.

View solution in original post

southeringtonp
Motivator

You'll need to edit/override the navigation XML file.

Via the manager, go to User Interface -> Navigation Menus, and click on the "default" entry for the search app.

Or, make a copy of $SPLUNK_HOME/etc/apps/search/default/data/ui/nav/default.xml at $SPLUNK_HOME/etc/apps/search/local/data/ui/nav/default.xml, and edit your changes there.

The format should be reasonably self-evident.

View solution in original post

jdagenais
Explorer

Thanks! Quite Easy.

For example, I added these entries:

<collection label="Search">
  <saved source="unclassified" match="Search" />
</collection>
<collection label="Report">
  <saved source="unclassified" match="Report" />
</collection>
<collection label="Chart">
  <saved source="unclassified" match="Chart" />
</collection>
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!