Splunk Enterprise

Where are edits to the navigation menu from settings -> user interface and editing using dashboard editor saved?

gjanardh
Explorer

Will Editing navigation menu from settings -> user interface and editing using dashboard editor save the updated default.xml in nav folder and views in apps\default\data\ui\views folder?

If not, where are the changes persisted to?

Thanks

0 Karma
1 Solution

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

View solution in original post

Michael
Contributor

Also, accessible via the GUI under: Settings, User Interface, Navigation menus... (v7.*)

0 Karma

elliotproebstel
Champion

You are close. Changes made from the UI will not go into the "default" folder, though; they will go into local. So you can find your changes persisted in $SPLUNK_HOME/etc/apps/yourapp/local/data/ui/nav/default.xml

gjanardh
Explorer

Thank you! Will changes made to files under default be picked up upon restart?

0 Karma

elliotproebstel
Champion

Splunk configuration file precedence is pretty complicated, but this page does a good job of detailing it:
http://docs.splunk.com/Documentation/Splunk/7.0.0/Admin/Wheretofindtheconfigurationfiles

Values in the local folder will take precedence over values in the default folder. Generally speaking, unless you are the developing an app for distribution, you are advised to not make changes to the default folder. Changes you make in the local folder will persist through app updates, but changes you make in the default folder will generally get wiped out if you update an app.

0 Karma

gjanardh
Explorer

Thank you!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...