change default app in splunk free license

[pmr]

I'm trying to change default launcher app from search to some custom app, on a splunk free version but looks like it isn't working. The same works in a splunk enterprise version. Want to confirm if default app cannot be changed on a splunk free version ?

can someone confirm that pls ?

thanks pmr

[jeeames]

$SPLUNK_HOME/etc/users/admin/user-prefs/local

Edit user-prefs.com

You define the default app here on the line that looks like this:
default_namespace = search
In this case, the default app would be search; change it to the one you want

[lguinn2]

The default app is set for a user - and Splunk Free does not have users. That said, there is a file that contains the default setup: $SPLUNK_HOME/etc/apps/user-prefs/default/user-prefs.conf

I don't know if changing this file will make a difference in your default app, but it is worth a try. Although you should probably create the file/directory $SPLUNK_HOME/etc/apps/user-prefs/local/user-prefs.conf and make your changes there.

You might also look and see if your Splunk has the directory: $SPLUNK_HOME/etc/users

If yes, you might want to see if there is a user-prefs.conf file somewhere within the users directory.