I'm trying to change default launcher app from search to some custom app, on a splunk free version but looks like it isn't working. The same works in a splunk enterprise version. Want to confirm if default app cannot be changed on a splunk free version ?
can someone confirm that pls ?
thanks pmr
$SPLUNK_HOME/etc/users/admin/user-prefs/local
Edit user-prefs.com
You define the default app here on the line that looks like this:
default_namespace = search
In this case, the default app would be search; change it to the one you want
The default app is set for a user - and Splunk Free does not have users. That said, there is a file that contains the default setup: $SPLUNK_HOME/etc/apps/user-prefs/default/user-prefs.conf
I don't know if changing this file will make a difference in your default app, but it is worth a try. Although you should probably create the file/directory $SPLUNK_HOME/etc/apps/user-prefs/local/user-prefs.conf
and make your changes there.
You might also look and see if your Splunk has the directory: $SPLUNK_HOME/etc/users
If yes, you might want to see if there is a user-prefs.conf
file somewhere within the users directory.