Modern navigation UI changes

Splunk platform version 10.6 includes updates to the Splunk Web navigation experience that change the location and appearance of common navigation controls.

Splunk platform version 10.4 introduced updates to the navigation experience. Splunk platform version 10.6 adds changes to collapsed app navigation and custom navigation icon support. These changes affect the location and appearance of common navigation controls. Most menu groups and menu item names remain the same. Most product documentation shows previous menu paths and screenshots while documentation updates are in progress.

Note: The new modern navigation experience for the Splunk platform cannot be reverted to the previous UI. This design aligns with Cisco’s current user experience standards and is part of an ongoing effort to provide a consistent, modern interface across Cisco products.

Splunk bar changes

  • The following navigation items appear as icons:

    • Activity uses a pulse icon.

    • Notifications uses a bell icon. This is equivalent to Messages in Splunk platform versions lower than 10.4.

    • Help uses a question mark icon.

  • Settings: the Settings menu uses a gear icon. The menu has an updated design, and settings remain grouped and named as they were in earlier versions.

    The Find experience, which uses a standard filter, replaces Spotlight Search, the search bar inside the Settings menu in versions lower than 10.4.

    The Splunk Settings menu opened to the results of searching for "bulletin". There are no results displayed and the user has the option to select Find more results.

    If you can't find your desired result, select Find more results to open the global Find experience.

    The Find window opened to the results of searching for "bulletin".

  • The app launcher appears in the upper-right area of the navigation bar, near the user menu. Select the waffle app launcher icon to switch between apps. You can also use the search field in the app launcher to find apps.

    The Apps dropdown, where the user can select and search for apps.

App navigation changes

Default app views, such as Search, Analytics, and Datasets in the Search & Reporting app, appear in a vertical navigation bar on the left side of the page. In Splunk platform 10.6, both collapsed and expanded views display an icon and the navigation item's name. In Splunk platform 10.4, collapsed navigation displayed icons only.

For app navigation items that don’t have a default icon, the Splunk platform displays a monogram using the first letter of the item name. App owners can specify a custom icon for a navigation item by adding the icon attribute to the app’s navigation definition file, default.xml. In Splunk platform 10.6, the icon attribute supports any icon in the Splunk React icon library. For Splunk platform 10.6, icon names are case-sensitive and must match the React icon name exactly. For example: <a href="/search" icon="Star" />.

The icon names supported in Splunk platform 10.4 remain supported in 10.6.

Custom icons are not added automatically to existing apps. App owners must update the app’s navigation definition file and refresh Splunk Web for the change to appear. The icon attribute applies only to apps that use modern navigation. If an icon does not appear, verify that:

  • The app uses modern navigation.
  • The icon name uses the correct capitalization.
  • Splunk Web was refreshed after default.xml was updated.

For more information about enabling modern navigation and editing an app’s navigation definition file, see Add navigation to an app and the Navigation XML reference.