You can do this temporarily but each user will be able to overload/modify it:
http://docs.splunk.com/Documentation/Splunk/6.2.3/Admin/Viewstatesconf
You can do this temporarily but each user will be able to overload/modify it:
http://docs.splunk.com/Documentation/Splunk/6.2.3/Admin/Viewstatesconf