Reporting

Navigation Menu: Why are saved searches are not opening in the customized view?

dorilevy
Path Finder

Hey,

According to the splunk documentation for navigation (http://docs.splunk.com/Documentation/Splunk/6.2.1/AdvancedDev/BuildNavigation#Build_the_navigation_X... ) the default.xml file supports "view" attribute for "saved" tag. This should make the saved search open in a different view. I tried using it, but I can't seem to make it work (check the new view):

<nav>
    <a href="search">Home</a>
  <collection label="General">
        <collection label="Reports">
                <saved source="unclassified" match="General" view="newview" />
                <view source="unclassified" match="General"/>
        </collection>
  </collection>
</nav>

Am i missing something?

Dori

0 Karma

NOUMSSI
Builder

Hi Dori,

Here is the mistake that you make:

The first option taht i propose to you is: If you want to use the option match in the tags saved and/or view, his value most be equal to one name of your saved searches that exists.

The second option is very easy: Just remove this match="General" in those tags.

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...