Security

How to disable search tour for all users in Splunk 6.3.x?

johnberwick
Splunk Employee
Splunk Employee

Since upgrading to 6.3.0 I have been getting a popup asking me to take a search tour but would like to disable this for all users.

1 Solution

johnberwick
Splunk Employee
Splunk Employee

Added the following configuration to $SPLUNK/etc/system/local/ui-tour.conf and restarted splunk.

[search-tour]
viewed = 1

View solution in original post

otaci
Explorer

Block all tours (including dashboards) using:

[default]
useTour = false

Note: our reverse proxy (for authentication) doesnt allow the %3A (colon) in the URL for the dashboard tour

johnberwick
Splunk Employee
Splunk Employee

Added the following configuration to $SPLUNK/etc/system/local/ui-tour.conf and restarted splunk.

[search-tour]
viewed = 1

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...