Splunk Search
Highlighted

Where is XML

Path Finder

I have a view I want to edit for customization. The URL is below, but I cannot find the xml on the server.

localhost:8001/en-US/manager/search/data/ui/views/Test_1

I thought it would be here:

$SPLUNK_HOME/etc/apps/<app_name>/local/data/ui/views/

But search does not seem to have a local folder.

0 Karma
Highlighted

Re: Where is XML

Legend

Did you check default?

0 Karma
Highlighted

Re: Where is XML

Path Finder

Under $SPLUNK_HOME/etc/apps/search I only have a bin folder and no files.

0 Karma
Highlighted

Re: Where is XML

Legend

If this is not a shared view, it will probably be under

$SPLUNK_HOME/etc/users/<username>/search/local/data/ui/views/Test_1

Highlighted

Re: Where is XML

Champion

Yes correct, i was about to suggest that!

0 Karma
Highlighted

Re: Where is XML

Path Finder

No search folder for me on that path:

[root@wf-1 admin]# pwd
/opt/splunk/etc/users/admin
[root@wf-1 admin]# ls
user-prefs

[root@wf-1 user-prefs]# pwd
/opt/splunk/etc/users/admin/user-prefs
[root@wf-1 user-prefs]# ls
local metadata

Tried a find at $SPLUNKHOME and come up empty for Test1

0 Karma
Highlighted

Re: Where is XML

Legend

Ah, how did you create this? Test_1 might be the name of the dashboard, not the name of the file...

0 Karma
Highlighted

Re: Where is XML

Path Finder

Ok, I found the issue. I was looking in the wrong $SPLUNK_HOME (prior installation). User error.

/splunk/etc/users/admin/search/local/data/ui/views

Thanks lguinn for the right path.

View solution in original post

0 Karma