Hello,
is it possible to set 'smart mode' search for all users in a search head cluster, if yes, how?
Thanks.
you can change the ui-prefs.conf and set it to smart
http://docs.splunk.com/Documentation/Splunk/6.6.2/admin/Ui-prefsconf
you can change the ui-prefs.conf and set it to smart
http://docs.splunk.com/Documentation/Splunk/6.6.2/admin/Ui-prefsconf