Where is XML

[motobeats]

I have a view I want to edit for customization. The URL is below, but I cannot find the xml on the server.

localhost:8001/en-US/manager/search/data/ui/views/Test_1

I thought it would be here:

$SPLUNK_HOME/etc/apps/<app_name>/local/data/ui/views/

But search does not seem to have a local folder.

[motobeats · Accepted solution]

Ok, I found the issue. I was looking in the wrong $SPLUNK_HOME (prior installation). User error.

/splunk/etc/users/admin/search/local/data/ui/views

Thanks lguinn for the right path.

[lguinn2]

Ah, how did you create this? Test_1 might be the name of the dashboard, not the name of the file...

[motobeats]

No search folder for me on that path:

[root@wf-1 admin]# pwd
/opt/splunk/etc/users/admin
[root@wf-1 admin]# ls
user-prefs

[root@wf-1 user-prefs]# pwd
/opt/splunk/etc/users/admin/user-prefs
[root@wf-1 user-prefs]# ls
local metadata

Tried a find at $SPLUNK_HOME and come up empty for Test_1

[linu1988]

Yes correct, i was about to suggest that!

[lguinn2]

If this is not a shared view, it will probably be under

$SPLUNK_HOME/etc/users/<username>/search/local/data/ui/views/Test_1

[motobeats]

Under $SPLUNK_HOME/etc/apps/search I only have a bin folder and no files.

[Ayn]

Did you check default?