Splunk Search

Default visualisation for charts

dataisbeautiful
Communicator

Each time I run a search query and click visualisation, the default is "column chart".

How do I set this to default to "line chart" for myself, and how do I set this for other users?

Thanks in advance

Labels (1)
Tags (1)

star_lord
Explorer

@dataisbeautiful 

You should be able to control this by adding this line:

display.visualizations.charting.chart = line


to the following .conf file(s):

Global:

$SPLUNK_HOME/etc/system/local/ui-prefs.conf


Per User:

$SPLUNK_HOME/etc/users/<username>/system/local/ui-prefs.conf


For more information see:
https://docs.splunk.com/Documentation/Splunk/9.3.1/admin/Ui-prefsconf

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...