How to modify/add sub menu to the Search App - Search & Reports Menu?

[jdagenais]

We are adding more search and report in the "Search & Reports" menu, and I would like to add sub menus such as:

Search Report Charts Queries etc...

Thanks, Jean

[southeringtonp · Accepted solution]

You'll need to edit/override the navigation XML file.

Via the manager, go to User Interface -> Navigation Menus, and click on the "default" entry for the search app.

Or, make a copy of $SPLUNK_HOME/etc/apps/search/default/data/ui/nav/default.xml at $SPLUNK_HOME/etc/apps/search/local/data/ui/nav/default.xml, and edit your changes there.

The format should be reasonably self-evident.

[jdagenais]

Thanks! Quite Easy.

For example, I added these entries:

<collection label="Search">
  <saved source="unclassified" match="Search" />
</collection>
<collection label="Report">
  <saved source="unclassified" match="Report" />
</collection>
<collection label="Chart">
  <saved source="unclassified" match="Chart" />
</collection>