We are installing a larger Splunk setup.
It has a lot of index servers.
Are there anyway to customize the very top header to see what server we are logged in to?
Today, we can see it by an url like http://splunk-jobs etc.
Different color on top bar would be nice.
I know I can make a custom app with an logo.png. But this would then only be showed when logging in.
If you want to identify it in the login page itself, you could customize it in web.conf which would display customized messages for each environment. Reference : https://docs.splunk.com/Documentation/Splunk/7.1.2/AdvancedDev/CustomizeLogin
[settings] login_content = <font color="red">This is a <b>production server</b></color>
Once the user logged in , you could change the appearance by changing the appBar color by setting the value in
User interface » Navigation menus » default and change
<nav search_view="search" color="#FF5733">
From 7.1, this would only change the app Icon and the view name selection
The first thing helps for the login page.
Since I am running 7.1, app icon could be used.
But I would like to see all the time I am on the server, that this is my main server.
Example the top line should be green in any app, any view.
you can also try
customFavicon in web.conf. Most of the customization are based on app context. You could change the core splunk css but it will get overwritten by the upgrades