Security

Where in the backend does the Splunk Login Background images can be found?

jaracan
Communicator

Hi Team,

I had uploaded a png file to change my Splunk Login Background.

I check the web.conf and the file looks like this.

web.conf
[settings]
httpport = 8001
loginBackgroundImageOption = custom
loginCustomBackgroundImage = search:logincustombg/blue.png

Now, my question is, where can I find the uploaded png file in the backend, in this example "blue.png".
I tried to check on the $SPLUNK_HOME/etc/system/static but did not found the "blue.png".

Tags (3)
0 Karma
1 Solution

MuS
Legend

Hi jaracan,

you would find your image in $SPLUNK_HOME/etc/apps/search/appserver/static/ as your web.conf is using the search app context for loginCustomBackgroundImage.

Hope this helps ...

cheers, MuS

View solution in original post

0 Karma

MuS
Legend

Hi jaracan,

you would find your image in $SPLUNK_HOME/etc/apps/search/appserver/static/ as your web.conf is using the search app context for loginCustomBackgroundImage.

Hope this helps ...

cheers, MuS

0 Karma

jaracan
Communicator

Thanks MuS. I though the "search" was a special term, and realized it was pertaining to the "search app". Kudos!

0 Karma

niketn
Legend

@jaracan, here is the documentation for Splunk login Customization: https://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/CustomizeLogin#Customize_the_login_p...

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...