Splunk Search

Default visualisation for charts

dataisbeautiful
Communicator

Each time I run a search query and click visualisation, the default is "column chart".

How do I set this to default to "line chart" for myself, and how do I set this for other users?

Thanks in advance

Labels (1)
Tags (1)

star_lord
Explorer

@dataisbeautiful 

You should be able to control this by adding this line:

display.visualizations.charting.chart = line


to the following .conf file(s):

Global:

$SPLUNK_HOME/etc/system/local/ui-prefs.conf


Per User:

$SPLUNK_HOME/etc/users/<username>/system/local/ui-prefs.conf


For more information see:
https://docs.splunk.com/Documentation/Splunk/9.3.1/admin/Ui-prefsconf

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...