Ok, did some digging and it looks like the rendering / parsing of simple XML modules is done in
$SPLUNK_HOME/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/view/*
Specifically form.py and dashboard.py have a toObject() method that builds the object tree of the final resulting module. For example here is the start of the module for form searches:
def toObject(self):
# build the standard dashboard view preamble
output = {
'isVisible': self.isVisible,
'label': self.label,
'onunloadCancelJobs': self.onunloadCancelJobs,
'autoCancelInterval': self.autoCancelInterval,
'stylesheet': self.stylesheet,
'template': self.template,
'objectMode': self.objectMode,
'modules': [
{
'className': 'AccountBar',
'layoutPanel': 'appHeader'
},
{
'className': 'AppBar',
'layoutPanel': 'navigationHeader'
},
This then is rendered into the internal XML later on. Sadly I don't see any supported way to edit this from inside an application so any edits here should be done at your own risk (or really not done at all).
... View more