Splunk Search

Selected fileds in splunk UI are not getting saved.

Splunk-Star
Loves-to-Learn Lots

Selected fields in splunk UI are not getting saved, each time again we need to select the fields once logging again to splunk UI.

Labels (1)
0 Karma

kiran_panchavat
SplunkTrust
SplunkTrust

@Splunk-Star 

The user configuration known as "selected fields" is located in $SPLUNK_HOME/splunk/etc/users//user-prefs/local/ui-prefs.conf and is modifiable by interface.
Users can change the default user-prefs.conf file that you set.

The choice is

fields = ["host","source","sourcetype"] in display.events.fields

https://docs.splunk.com/Documentation/Splunk/latest/Admin/Ui-prefsconf#Display_Formatting_Options 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...