Can I change the splunk favicon per instance?

[bmorgan]

I have many tabs open in my browser. Sometimes the only thing that shows on each tab is the favicon. I often have three distinct splunk sources open (spunk.com - doc & anwsers) my splunk in production and my splunk in QA/non-prod. It would be cool to tell the diffrence by changing the icon for Prod and QA. Then I could keep all three distinct.

[ftk · Accepted solution]

The favicon.ico is located at $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/img/favicon.ico. You could change that on your distinct instances to be able to better differentiate between them.

[mitch]

...although be aware that file will get replaced each time you upgrade Splunk. You'll have to re-apply.