If you changed it in the web interface, it is likely created an indexes.conf in $SPLUNK_HOME\etc\apps\search\local with your settings. I personally hate distributing settings in the application directories so I tend to edit the conf files directly under etc\system\local...
... View more