https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104472#M183178 <P>How and where does Splunk store user's preferences (like selected fields, last used time range, that kind of thing)? What permissions are needed to create or modify whatever files are used for this?</P> Thu, 17 Oct 2013 16:11:36 GMT wpreston 2013-10-17T16:11:36Z https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104472#M183178 <P>How and where does Splunk store user's preferences (like selected fields, last used time range, that kind of thing)? What permissions are needed to create or modify whatever files are used for this?</P> Thu, 17 Oct 2013 16:11:36 GMT https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104472#M183178 wpreston 2013-10-17T16:11:36Z https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104473#M183179 <P>They are in $SPLUNKHOME/etc/users and owned by the splunk user.</P> Thu, 17 Oct 2013 16:36:00 GMT https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104473#M183179 jtrucks 2013-10-17T16:36:00Z https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104474#M183180 <P>Great, thank you for your answer! I found a file called UI Prefs.conf and it does have the fields selected by the user. However, the user's selected time range is not in that file. What file is that stored in? I looked around at all the files in my user's directory and didn't see it anywhere.</P> Thu, 17 Oct 2013 17:40:10 GMT https://community.splunk.com/t5/Splunk-Search/User-Preferences/m-p/104474#M183180 wpreston 2013-10-17T17:40:10Z