Splunk Search

Change Logo on screen

rmoreira
Splunk Employee
Splunk Employee

Hello,

I read the previous answer for changing the logo graphic "logo-mrsparkle.png". Can someone please provide step by step instructions?

If you wish to change the Splunk Logo on the main auth page, simple replace this graphic;

$SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/img/skins/default/logo-mrsparkle.png

Be sure to restart Splunk to see changes.

Tags (1)

kmattern
Builder

If you are talking about creating a custom login page do the following.

  1. create a file named logo-mrsparkle.png that is 800x400 pixels
  2. Place your logo in the leftmost 400 pixels of the image
  3. If you have a message, such as "My Company Stats Login" put it in the top 50 pixels in the rightmost half of the graphic.
  4. Rename $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/img/skins/default/logo-mrsparkle.png to something else
  5. Put your graphic in its place and restart Splunk.
  6. Your logo will appear in the login screen. That's what we did.

If it is an app logo, just be sure to edit the .css to set the height and width to be equal or greater than the width of the logo. Otherwise it will get cut off.

Ant1D
Motivator

If you want to change the logo for your app (located at the top left corner of your page), do the following:

  1. add your logo (e.g. mylogo.png) to $SPLUNK_HOME$/etc/apps/your-app/appserver/static
  2. create a file named application.css in $SPLUNK_HOME$/etc/apps/your-app/appserver/static
  3. In the application.css file, add the following code:

.appLogo {
background: url("mylogo.png") no-repeat;
}

Save this file and restart splunk and the logo should now be changed.


Alternatively, if you want to change the actual logo-mrsparkle.png file, then you can navigate to the $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/img/skins/default directory and overwrite the logo-mrsparkle.png file with another file of the exact same name. However, from a best practices perspective, I would recommend to not make changes to files located in any Splunk directory named Default

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...