Disable update checker

Splunk Web is configured to check for new versions of itself and display a banner. If you are running Splunk on a LAN that is not connected to the rest of the Web, modify web.conf to disable this feature.

Note: The default web.conf is located in $SPLUNK_HOME/etc/system/default/. DO NOT edit this file. Instead, copy web.conf into $SPLUNK_HOME/etc/system/local/; then, edit the copy. For more information about configuration files, refer to this Admin manual topic.

To disable update checker, add the following to $SPLUNK_HOME/etc/system/local/web.conf:

[settings]
updateCheckerBaseURL = 0

Previous: Run Splunk as non-root user | Next: Install Splunk for lightweight forwarding

Comments

@ emma:
Thank you. I'm rebuilding the box and will make sure to only edit the local files.
Posted by ranger51r on Sep 04 2008, 12:07pm
@ranfer51r: default conf files live in the ../default/ dir. you can copy parts of the files that you want to change into local and edit them there. you should never edit the files directly in default.
Posted by emma on Aug 26 2008, 2:34pm
airborneric: what version of Splunk are you running? the directory structure changed in 3.3. for more information, refer to:

http://www.splunk.com/doc/3.3/releasenotes/WhatsNew

and

http://www.splunk.com/doc/3.3.2/admin/BundlesIntro#Configurationfiledirectorystructure
Posted by sophy on Aug 21 2008, 10:22am
correction etc\bundles\local and default......
Posted by airborneric on Aug 21 2008, 7:04am
I don't have a system file, but do have a bin file - which is where I found the web.conf files..........Windows 2003.
Posted by airborneric on Aug 21 2008, 6:57am
thanks for the comment! i've fixed this page so it makes a lot more sense.
Posted by emma on Aug 20 2008, 3:24pm
I found web.conf (on OS X 10.4.11 - Tiger Server) in $SPLUNK_HOME/etc/system/default/ rather than in $SPLUNK_HOME/etc/system/local/.
Posted by ranger51r on Aug 20 2008, 2:15pm