Splunk forum member: lguinn2 shows us to:

Put the following in the configuration file web.conf (perhaps in etc/system/local or etc/apps/search/local)

login_content =

Found information here: https://answers.splunk.com/answers/320607/is-there-way-to-add-a-warning-message-in-splunk-we.html