Preferences
The only item in the account menu: language, theme, default index, rows per page, remembered column sets. Passwords are changed in Splunk.
The account menu top-right shows the Splunk user and role tier and holds one item, "Preferences". No profile, no password change: the account is Splunk's.
| Item | Notes |
|---|---|
| Language | Chinese / English, the same value as the top-bar switch |
| Theme | Light / dark / system |
| Default index | Used by Smart query and the search commands when none is given; empty = auto |
| Rows per page | Page size for result tables and lists |
| Remembered column sets | Column choices remembered per index in result tables; "Reset" clears them |
Preferences live in the KV store (copilot_state, per user) and follow the user across devices; triage dispositions, saved triage batches and favourite queries are stored the same way.
MCP
Expose the read-only tools and investigate / triage / explain / generate to external agents (Claude Desktop, Cursor, your own): Streamable HTTP, tokens issued per role, the same gates and audit as the UI. Since 1.9.0.
FAQ
Symptoms to causes: pages, model, licence, permissions, results, integrations, performance.