I have a view I want to edit for customization. The URL is below, but I cannot find the xml on the server.
I thought it would be here:
But search does not seem to have a local folder.
No search folder for me on that path:
[root@wf-1 admin]# pwd
[root@wf-1 admin]# ls
[root@wf-1 user-prefs]# pwd
[root@wf-1 user-prefs]# ls
Tried a find at $SPLUNKHOME and come up empty for Test1
Ok, I found the issue. I was looking in the wrong $SPLUNK_HOME (prior installation). User error.
Thanks lguinn for the right path.