Book Image

Implementing Splunk (Update)

Book Image

Implementing Splunk (Update)

Overview of this book

Table of Contents (20 chapters)
Implementing Splunk Second Edition
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Editing navigation


Navigation is controlled by an XML file that can be accessed by going to Settings | User interface | Navigation menus:

There can only be one active navigation file per app, and it is always called default.

After clicking on the name, we see the XML provided by the barebones template:

<nav search_view="search" color="#65A637">
 <view name="search" default='true' />
 <view name="data_models" />
 <view name="reports" />
 <view name="alerts" />
 <view name="dashboards" />
</nav>

Note that if you check the navigation for another app (search) you will notice the same XML.

The structure of the XML is essentially the following:

nav
view
saved
collection
view
a href
saved
divider
collection

The logic of navigation is probably best absorbed by simply editing it and seeing what happens. You should keep a backup, as this XML is somewhat fragile, and Splunk does not provide any kind of version control. Here are some general details about nav:

  • Children...