Solved: Alerts menu missing in Splunk DB Connect app

When you are using Splunk as your logs digestion central tool you may have installed some extra apps in it from Splunkbase.

One of such apps is Splunk DB Connect if you would like to have Database connection functionality (SQL queries) in your Splunk. This is very useful for example to build SQL based alert rules to monitor your _insert your app name here_.

When Splunk DB Connect gets installed into Splunk Enterprise, one little annoying thing noted – the Alerts menu item is completely missing in the app (is present in other apps).

So to access alerts created in Splunk DB Connect, out of the box you needed to add /alerts to the end of the URL of the app front view. Not good 🙂

Alerts menu item missing in Splunk DB Connect App
Alerts menu item missing in Splunk DB Connect App

How to add Alerts menu item in Splunk DB Connect app?

  1. Open app Splunk DB Connect from the apps menu at the top left
    Splunk DB Connect app
  2. In top-right menu navigate to Settings -> User Interface -> Navigation menus -> (your nav name, most likely “default”)You will see an XML of current menu items with subitems of this app.
    XML of Splunk DB Connect menu items
  3. Insert the following row of XML where you would like the Alerts menu item to appear.<view name=”alerts” />So that the XML looks like this:
    Add Alerts menu item to Splunk DB Connect app via XML
  4. Press OK and you should see a confirmation message.
    Splunk DB Connect successfully updated

 

Final result (Alerts menu item present)

Splunk DB Connect has alerts menu item
Splunk DB Connect has alerts menu item

This was a short tutorial on how to add Alerts menu item to Splunk DB Connect app that was missing out of the box. Hope this helps someone.

Post Author: Tom Pai