Splunk Search

Users are constantly being prompted to "take the tour" when logging into Splunk 6.4.1

mikelanghorst
Motivator

After I upgraded my Splunk environment to 6.4.1, my users are reporting that they are repeatedly prompted as a new user would to take the tour for the app. I notice for users that are not getting it, under etc/users/username/app/local/ui-tour.conf will have a viewed = 1, while other users do not.

Any idea why this is occurring?

0 Karma
1 Solution

teunlaan
Contributor

We noticed when there is an new app with tour (ITSI), it wil allways pop-up the tour as long there is nothing configured in the new app.

So are the users "working" with app or just open it?

The is also a global setting to Ignore the tours.
Place ui-tour.conf in etc/system/local with

[default]
useTour = false

View solution in original post

teunlaan
Contributor

We noticed when there is an new app with tour (ITSI), it wil allways pop-up the tour as long there is nothing configured in the new app.

So are the users "working" with app or just open it?

The is also a global setting to Ignore the tours.
Place ui-tour.conf in etc/system/local with

[default]
useTour = false

jkat54
SplunkTrust
SplunkTrust

Sounds like a permissions issue on the filesystem. Check that the owner of the Splunk process has write permission on that users folder.

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...