Splunk Search

Search app specific to index in 6.x

Explorer

Hi,
I need abc search app created which is specific to index=abc

I don't want to do this as user/role based. Want to update a file within app itself to takecare.

Thanks
Vinay

Tags (2)
0 Karma

SplunkTrust
SplunkTrust

Explorer

nope. This is not working in 6.x

I have copied file from default search app to storage app and added index=storage
/opt/splunk/etc/apps/search/default/data/ui/views/flashtimeline.xml

0 Karma

SplunkTrust
SplunkTrust

When you use above code, is "index=storage" not populated by default?

0 Karma

Explorer

I have tried it but did not help


index=storage
true
true
False
True

0 Karma