Splunk® Enterprise

Admin Manual

Splunk Enterprise version 7.2 is no longer supported as of April 30, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Configure Splunk Web to open directly to an app

You can configure Splunk Web so that it bypasses Splunk Home and instead opens in a specific app of your choosing. This is called setting a default app. While we recommend implementing this by roles, you can also set a default app for all users or on a per-user basis. A default app set for a specific user takes precedence over the default app for that user's role.

Set a default app by role

You can set a default app for all users with a specific role. For example, you could send all users with the "user" role to an app you created, and all admin users to the Monitoring Console.

To bypass Splunk Home for all users of a specific role:

  1. In Splunk Web, click Settings > Access controls.
  2. Click Roles.
  3. Click the name of the role you wish to configure.
  4. At the top of the screen, use the Default app dropdown to select the new default app.
  5. Click Save.

The change goes into effect without a restart.

Set a default app for all users

You can specify a default app for all users to land in when they log in. For example, to set the Search app as the global default:

  1. Create or edit $SPLUNK_HOME/etc/apps/user-prefs/local/user-prefs.conf (*nix) or %SPLUNK_HOME%\etc\apps\user-prefs\local\user-prefs.conf (Windows).
  2. Specify
    [general_default]
    default_namespace = search
  3. Restart Splunk Enterprise for the change to take effect.

See user-prefs.conf.spec.

Set a default app for a single user

In most cases, you should set default apps by role. But if your use case requires you to set a default app for a specific user, you can do this through Splunk Web.

To make the Search app the default landing app for a user:

  1. In Splunk Web, click Settings > Access controls.
  2. Click Users.
  3. Click the name of the user you wish to configure.
  4. Under Default app, select the app you wish to set as default.
  5. Click Save.

The change goes into effect without a restart.

About app permissions

A user will see an error if:

  • The user does not have permission to access their default app, or
  • The default app does not exist (for example, if it is typed incorrectly in user-prefs.conf).


See Manage app and add-on configurations and properties for information about managing permissions on an app.

Last modified on 27 July, 2021
Search and Reporting app   Where to get more apps and add-ons

This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters