I'm currently looking at migrating from Splunk 5.0.5 to Splunk 6.0.0 and one area where we're having issues is in times.conf
In here:
/opt/splunk/etc/system/local/times.conf
We have:
[custom_menu]
label = Custom_Menu
is_sub_menu = True
order = 300
[range_1]
label = Range 1
earliest_time = 1307919600
latest_time = 1309734000
order = 5
sub_menu = Custom_Menu
[range_2]
label = Range 2
earliest_time = 1307919600
latest_time = 1308006000
order = 10
sub_menu = Custom_Menu
No matter what I try, the two ranges 'Range 1' and 'Range 2' do not appear under the defined Sub Menu (Custom_Menu). The ranges just appear under the 'Other' Sub Menu in the Time Ranger Picker.
This was all working fine in 5.0.5
Am I doing anything wrong, or is this possibly a bug in 6.0.0?
Thanks,
Graham