Is it possible to push system/local/ui-prefs.conf from the deployer to the SHC?
Is it as simple as creating shcluster/system/local/ui-prefs.conf, or does it not work that way?
It is almost that simple. You'll need to create a TA and put it inside of $SPLUNK_HOME/etc/shcluster/apps/
This TA can be as simple as a named folder with a folder called "local" inside of it with the ui-prefs.conf file you wish to distribute inside of that.
View solution in original post