Each time I run a search query and click visualisation, the default is "column chart".
How do I set this to default to "line chart" for myself, and how do I set this for other users?
Thanks in advance
@dataisbeautiful
You should be able to control this by adding this line:
display.visualizations.charting.chart = line
to the following .conf file(s):
Global:
$SPLUNK_HOME/etc/system/local/ui-prefs.conf
Per User:
$SPLUNK_HOME/etc/users/<username>/system/local/ui-prefs.conf
For more information see:
https://docs.splunk.com/Documentation/Splunk/9.3.1/admin/Ui-prefsconf