Splunk Search

Users are constantly being prompted to "take the tour" when logging into Splunk 6.4.1

mikelanghorst
Motivator

After I upgraded my Splunk environment to 6.4.1, my users are reporting that they are repeatedly prompted as a new user would to take the tour for the app. I notice for users that are not getting it, under etc/users/username/app/local/ui-tour.conf will have a viewed = 1, while other users do not.

Any idea why this is occurring?

0 Karma
1 Solution

teunlaan
Contributor

We noticed when there is an new app with tour (ITSI), it wil allways pop-up the tour as long there is nothing configured in the new app.

So are the users "working" with app or just open it?

The is also a global setting to Ignore the tours.
Place ui-tour.conf in etc/system/local with

[default]
useTour = false

View solution in original post

teunlaan
Contributor

We noticed when there is an new app with tour (ITSI), it wil allways pop-up the tour as long there is nothing configured in the new app.

So are the users "working" with app or just open it?

The is also a global setting to Ignore the tours.
Place ui-tour.conf in etc/system/local with

[default]
useTour = false

jkat54
SplunkTrust
SplunkTrust

Sounds like a permissions issue on the filesystem. Check that the owner of the Splunk process has write permission on that users folder.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...