https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195518#M7783 <P>I too have looked for an answer to this and best as I can tell, they are not written to disk. I tried setting a message and the grep'ing over the files in the Splunk directory without getting any hits. Further, the fact that the messages do not persist after a Splunk restart makes me think the messages are kept in memory only.</P> Wed, 11 Jun 2014 17:35:09 GMT rtadams89 2014-06-11T17:35:09Z https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195517#M7782 <P>Where is the path of the file created when creating a bulletin message?</P> <P>Manager-&gt;User interface-&gt;Bulletin Messages</P> Wed, 11 Jun 2014 01:29:25 GMT https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195517#M7782 ben_leung 2014-06-11T01:29:25Z https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195518#M7783 <P>I too have looked for an answer to this and best as I can tell, they are not written to disk. I tried setting a message and the grep'ing over the files in the Splunk directory without getting any hits. Further, the fact that the messages do not persist after a Splunk restart makes me think the messages are kept in memory only.</P> Wed, 11 Jun 2014 17:35:09 GMT https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195518#M7783 rtadams89 2014-06-11T17:35:09Z https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195519#M7784 <P>Yea, what the goal was is to "distribute" the message to multiple instances. Best way at the moment would be to contact the endpoint /services/messages/<MESSAGE_NAME> and do a REST call to the machines. Then delete them afterwards.</MESSAGE_NAME></P> Wed, 11 Jun 2014 17:38:05 GMT https://community.splunk.com/t5/Knowledge-Management/bulletin-message-path/m-p/195519#M7784 ben_leung 2014-06-11T17:38:05Z