Splunk Search

Change color scheme for test environment

mikesangray
Path Finder

It doesn't look like there's an easy way to change the colors, etc. for splunk, but it would be very helpful to identify when I'm working in test vs. production. Am I missing something, or is it just not an option to change splunk color schemes?

Maybe this an enhancement request I need to send to my splunk rep...?

Tags (1)
0 Karma

sundareshr
Legend

You can change the color for each app by modifying default.xml file in %SPLUNK_HOME%/etc//default/data/ui/nav

0 Karma

mikesangray
Path Finder

Here's the full path: /opt/splunk/etc/apps/search/default/data/ui/nav/default.xml

However, this only changes the color for the search app. All other apps including management, etc. all have their own .xml file which needs modifying as well...too cumbersome and changes are reverted during upgrades.

Uploading a new logo or nav background color would suffice, but putting files into mrsparkle isn't working.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...