Splunk® Enterprise

Admin Manual

Download manual as PDF

Download topic as PDF

Configure Splunk Web to open directly to an app

You can configure Splunk Web so that it bypasses Splunk Home and instead opens in a specific app of your choosing. This is called setting a default app. While we recommend implementing this by roles, you can also set a default app for all users or on a per-user basis.

Set a default app by role

You can set a default app for all users with a specific role. For example, you could send all users with the "user" role to an app you created, and all admin users to the Monitoring Console.

To bypass Splunk Home for all users of a specific role:

  1. In Splunk Web, click Settings > Access controls.
  2. Click Roles.
  3. Click the name of the role you wish to configure.
  4. At the top of the screen, use the Default app dropdown to select the new default app.
  5. Click Save.

The change goes into effect without a restart.

Set a default app for all users

You can specify a default app for all users to land in when they log in. For example, to set the Search app as the global default:

  1. Create or edit $SPLUNK_HOME/etc/apps/user-prefs/local/user-prefs.conf (*nix) or %SPLUNK_HOME%\etc\apps\user-prefs\local\user-prefs.conf (Windows).
  2. Specify
    [general_default]
    default_namespace = search
  3. Restart Splunk Enterprise for the change to take effect.

See user-prefs.conf.spec.

Set a default app for a single user

In most cases, you should set default apps by role. But if your use case requires you to set a default app for a specific user, you can do this through Splunk Web.

To make the Search app the default landing app for a user:

  1. In Splunk Web, click Settings > Access controls.
  2. Click Users.
  3. Click the name of the user you wish to configure.
  4. Under Default app, select the app you wish to set as default.
  5. Click Save.

The change goes into effect without a restart.

About app permissions

A user will see an error if:

  • The user does not have permission to access their default app, or
  • The default app does not exist (for example, if it is typed incorrectly in user-prefs.conf).


See Manage app and add-on configurations and properties for information about managing permissions on an app.

PREVIOUS
Search and Reporting app
  NEXT
Where to get more apps and add-ons

This documentation applies to the following versions of Splunk® Enterprise: 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.10, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.1.11, 6.1.12, 6.1.13, 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9, 6.2.10, 6.2.11, 6.2.12, 6.2.13, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.5.0, 6.5.1, 6.5.1612 (Splunk Cloud only), 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.6.0, 6.6.1, 6.6.2, 6.6.3


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters