In 4.1, the default app setting will be configurable through Manager.
To set the default app for a particular user:
To set a default app by role:
This is not working for me under 4.1, ewoo. I've tried setting this via the manager and also via the user-prefs.conf but for some reason it doesn't take effect.herve leger Was there by any chance a change made in 4.1 to store user prefs in a db table instead of in flat files?
This is not working for me under 4.1, ewoo. I've tried setting this via the manager and also via the user-prefs.conf but for some reason it doesn't take effect. Was there by any chance a change made in 4.1 to store user prefs in a db table instead of in flat files?
We store user preferences similarly in 4.0.x and 4.1. The biggest difference is that we now support per-role default apps, which required some additions to user-prefs.conf.
Definitely no storage to a database, however.
What specifically is not working for you? Are you trying to edit the conf files directly, or are you using Manager? Are you trying to set a default app for a specific user, a specific role, or everyone?
See my comment on wolverine's answer.
For 4.1, to set a GLOBAL default app, which in my example below is the 'search' app, you'll need to specify the following in $SPLUNK_HOME/etc/apps/user-prefs/local/user-prefs.conf :
[general_default]
default_namespace = search
In 4.2.4 Free License this does not seem to work.
Muebel, Thanks for catching that! I've corrected the doc so we don't have anymore confusion: http://www.splunk.com/base/Documentation/4.1.1/Admin/Whatsanapp#Bypass_the_Launcher_for_all_users
Wolverine has the key element here. The Splunk documentation says that you simply need to add "default_namespace = search" to the user-prefs.conf stanza, but this did not work for me. Once I included the above configuration as part of the [general_default] stanza, and then restarted splunk, I was able to see the Search app by default.
In 4.1, the default app setting will be configurable through Manager.
To set the default app for a particular user:
To set a default app by role:
You can set a default App, either per user or globally. This App displays by default every time you log into Splunk.
Configuration
Create a file called user-prefs.conf in the user's local directory (to apply to a user):
$SPLUNK_HOME/etc/users//user-prefs/local/user-prefs.conf
Or in the user-prefs App directory (to apply globally):
$SPLUNK_HOME/etc/apps/user-prefs/local/user-prefs.conf
Add the following to the user-prefs.conf file:
default_namespace = app_name
Note: The App name is case-sensitive.
Restart Splunk to load your new configuration.
Example For example, set the default App for the admin user to the Search App:
Edit
$SPLUNK_HOME/etc/users/admin/user-prefs/local/user-prefs.conf
.
For the test user, it would be in
$SPLUNK_HOME/etc/users/test/user-prefs/local/user-prefs.conf
Add the following:
default_namespace = search