It doesn't look like there's an easy way to change the colors, etc. for splunk, but it would be very helpful to identify when I'm working in test vs. production. Am I missing something, or is it just not an option to change splunk color schemes?
Maybe this an enhancement request I need to send to my splunk rep...?
You can change the color for each app by modifying default.xml file in %SPLUNK_HOME%/etc//default/data/ui/nav
Here's the full path: /opt/splunk/etc/apps/search/default/data/ui/nav/default.xml
However, this only changes the color for the search app. All other apps including management, etc. all have their own .xml file which needs modifying as well...too cumbersome and changes are reverted during upgrades.
Uploading a new logo or nav background color would suffice, but putting files into mrsparkle isn't working.