From 120481dcd4307ac9371aeec87bd7ac5f3856b80b Mon Sep 17 00:00:00 2001
From: Marc-Antoine Hinse <marc.antoine@flare.io>
Date: Mon, 18 Nov 2024 14:02:36 -0500
Subject: [PATCH] Change the Search button in the navigation to search for
 Flare events

---
 .../src/main/resources/splunk/default/data/ui/nav/default.xml  | 2 +-
 .../flare/src/main/resources/splunk/default/savedsearches.conf | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)
 create mode 100644 packages/flare/src/main/resources/splunk/default/savedsearches.conf

diff --git a/packages/flare/src/main/resources/splunk/default/data/ui/nav/default.xml b/packages/flare/src/main/resources/splunk/default/data/ui/nav/default.xml
index 78501a0..537d0c2 100644
--- a/packages/flare/src/main/resources/splunk/default/data/ui/nav/default.xml
+++ b/packages/flare/src/main/resources/splunk/default/data/ui/nav/default.xml
@@ -1,5 +1,5 @@
 <nav search_view="search" color="#272735">
-  <view name="search" default='true' />
+  <saved name="Flare Search" default='true' />
   <view name="configuration" />
   <view name="status" />
   <a href="https://docs.flare.io/splunk-app-integration" target="_blank">Documentation</a>
diff --git a/packages/flare/src/main/resources/splunk/default/savedsearches.conf b/packages/flare/src/main/resources/splunk/default/savedsearches.conf
new file mode 100644
index 0000000..f347c0e
--- /dev/null
+++ b/packages/flare/src/main/resources/splunk/default/savedsearches.conf
@@ -0,0 +1,3 @@
+[Flare Search]
+description = Shows all of the ingested events
+search = source="flare"