Where is the proper location of user-prefs.conf?

[ddrillic]

All along we used to associate the user role to its default app at /opt/splunk/etc/shcluster/apps/user-prefs/local/user-prefs.conf on the deployer.

After the upgrade to 7.x we get the message -

-- Search Head Cluster Deployer: The configuration bundle contains the following default apps: SplunkForwarder, SplunkLightForwarder, framework, gettingstarted, introspection_generator_addon, launcher, learned, legacy, sample_app, search, user-prefs.

The question is derived from Why can't I push SH bundles?.

[adonio · Accepted solution]

Hello @ddrillic,

the apps mentioned above, are native to splunk and exists in any new splunk install.
these apps can not be pushed in a bundle from deployer to search head cluster members.
with that being said, you can take you user-prefs.conf file and place it in a new app and push to members.
read more in this article:
http://docs.splunk.com/Documentation/Splunk/7.0.1/DistSearch/Migratefromstandalonesearchheads#Do_not...

hope it helps

[ddrillic]

@adonio - for one thing this change in 7.x is not backward compatible as this feature of pushing the default user-prefs app has been working for us for years.