topic Where is the proper location of user-prefs.conf? in Knowledge Management

Where is the proper location of user-prefs.conf?

ddrillic — Tue, 29 Sep 2020 17:55:57 GMT

All along we used to associate the user role to its default app at /opt/splunk/etc/shcluster/apps/user-prefs/local/user-prefs.conf on the deployer.

After the upgrade to 7.x we get the message -

-- Search Head Cluster Deployer: The configuration bundle contains the following default apps: SplunkForwarder, SplunkLightForwarder, framework, gettingstarted, introspection_generator_addon, launcher, learned, legacy, sample_app, search, user-prefs.

The question is derived from Why can't I push SH bundles?.

Re: Where is the proper location of user-prefs.conf?

adonio — Tue, 30 Jan 2018 23:54:27 GMT

Hello @ddrillic,

the apps mentioned above, are native to splunk and exists in any new splunk install.
these apps can not be pushed in a bundle from deployer to search head cluster members.
with that being said, you can take you user-prefs.conf file and place it in a new app and push to members.
read more in this article:
http://docs.splunk.com/Documentation/Splunk/7.0.1/DistSearch/Migratefromstandalonesearchheads#Do_not_migrate_default_apps

hope it helps

Re: Where is the proper location of user-prefs.conf?

ddrillic — Wed, 31 Jan 2018 00:23:23 GMT

@adonio - for one thing this change in 7.x is not backward compatible as this feature of pushing the default user-prefs app has been working for us for years.