topic How to stop "First time on this page" prompt in Splunk Enterprise

How to stop "First time on this page" prompt

beckfield — Fri, 21 Feb 2020 16:19:33 GMT

Every time I log into Splunk, I'm met with the following question: "It looks like this is your first time on this page. Would you like to take a quick tour?"

It is not my first time on the page - the page is bookmarked because I'm there every day. How do I get Splunk to stop asking this question? I tried completing the tour to see if that would 'trick' it into stopping, but no luck.

Splunk Enterprise
Version: 7.3.0
Build: 657388c7a488

Re: How to stop "First time on this page" prompt

nickhills — Fri, 21 Feb 2020 17:25:09 GMT

Did you by chance initially start Splunk as root, and then switch to another user to run the process (like splunk)

It may be that the user splunk is currently running as can not modify some .conf files, so it can not record that the tour has been completed.

Check the permissions of this file $SPLUNK_HOME/etc/users/admin/search/local/ui-tour.conf
(assuming you are admin - otherwise substitute for your name!)

Re: How to stop "First time on this page" prompt

beckfield — Fri, 21 Feb 2020 19:35:00 GMT

That path/file does not exist on my system. Splunk is not installed on my computer. I am accessing our corporate instance via a web browser on Windows 10. I am not a Splunk admin.

Re: How to stop "First time on this page" prompt

nickhills — Fri, 21 Feb 2020 20:10:36 GMT

Welcome to Splunk answers

In ancy case, its nothing you (as an end user) are doing wrong, so I would raise this with your in-house admin team, and ask them to look into it.

Re: How to stop "First time on this page" prompt

beckfield — Fri, 21 Feb 2020 20:13:08 GMT

Will do, thanks.