Security

How can I disable the login notification message that a new Splunk version is available?

Ellen
Splunk Employee
Splunk Employee

My Splunk users do not need to know when a new version of Splunk is available and would like to remove this messaging. As the Splunk Administrator I access Splunk.com sufficiently to see when a new release is available. How can I turn this notification off?

Tags (2)
1 Solution

Ellen
Splunk Employee
Splunk Employee

web.conf contains the setting from which you can disable Splunk automatic checking for new versions:

By default the setting is:

updateCheckerBaseURL = http://quickdraw.splunk.com/js/ 

To disable automatic checking, add to your $SPLUNK_HOME/etc/system/local/web.conf:

[settings]
updateCheckerBaseURL = 0

Note: Disabling this feature will apply to all Splunk non-admin and admin users.

For further information refer to:

http://www.splunk.com/base/Documentation/4.0.11/Admin/Webconf or a related topic on suppressing messages for non-admin users.

View solution in original post

Keysofsandiego
Path Finder

For the free version of Splunk the webconf is located here.
$SPLUNK_HOME/etc/system/local/web.conf

The setting below is the same.
[settings]
modify this updateCheckerBaseURL = http://quickdraw.splunk.com/js/

to
updateCheckerBaseURL = 0

If this file does not exist just create a file called "web.conf" in the directory $SPLUNK_HOME/etc/system/local/web.conf
Thanks for the correction to edit local (not default files).
This is because when splunk upgreades the default files are overwritten.
=)

walterk82
Path Finder

Please do not change files in the system/default location. use system/local instead.

Ellen
Splunk Employee
Splunk Employee

web.conf contains the setting from which you can disable Splunk automatic checking for new versions:

By default the setting is:

updateCheckerBaseURL = http://quickdraw.splunk.com/js/ 

To disable automatic checking, add to your $SPLUNK_HOME/etc/system/local/web.conf:

[settings]
updateCheckerBaseURL = 0

Note: Disabling this feature will apply to all Splunk non-admin and admin users.

For further information refer to:

http://www.splunk.com/base/Documentation/4.0.11/Admin/Webconf or a related topic on suppressing messages for non-admin users.

sgannon200
Engager

Is there any reason for this not to work? I copied the default folder web.conf into local. I then set updateCheckerBaseURL = 0 & restarted the machine. But I'm still getting prompted to update.

shawngarrettsgp
Path Finder

Actually I think I figured out, looks to be a browser cache issue, I hopped on another machine and they are indeed fixed, woohoo.

0 Karma

shawngarrettsgp
Path Finder

I'm seeing the same thing, only on SHC members though after doing a rolling-restart. The rest of my infrastructure this worked fine.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...