Changes in $SPLUNK_HOME/share?

[TheEggi98]

Hi Splunkers,

i work with Splunk Enterprise and wonder if i can modify content in share folder.

I would like to change the fonts of the web-GUI to our corporate fonts and found the fonts used by splunk in $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/fonts and the CSS for that in ../exposed/build/css/bootstrap-enterprise.css (searched for proxima in the css)

Will it have any Impact on splunk Version updates or Splunksupport if i change the Fonts to corporate Fonts?

Thanks in Advance for your answers

[richgalloway · Accepted solution]

I can think of 3 effects of that.

1) The manifest will not match so there will be banner messages about the changed files.

2) Splunk upgrades will overwrite the changes so they will have to be re-applied.

3) Support may choose to refuse to help until the original files are restored.