topic Re: Warning/Error Banner messages in Splunk Search

Warning/Error Banner messages

rmorlen — Fri, 13 Jul 2012 17:12:18 GMT

I would like to suppress all messages in the search app. It would be nice to be able to suppress then by role so that Admins see the messages but Users don't.

Any suggestions on how to do this?

Currently we are using Splunk 4.2.5.

Re: Warning/Error Banner messages

lguinn2 — Fri, 13 Jul 2012 18:53:01 GMT

AFAIK, there is no way to do this by role. You can, however, edit the views in the search app so that no one gets the messages. You can also filter the messages so that not all messages appear; this might be some improvement, even if it isn't perfect.

Look at the Messaging Module reference for more info.

Re: Warning/Error Banner messages

rmorlen — Fri, 13 Jul 2012 19:01:43 GMT

I looked at that information but couldn't figure out where in the search app views the banner is displayed. I see the Message module referenced in about 5-6 files.

Re: Warning/Error Banner messages

lguinn2 — Fri, 13 Jul 2012 19:58:19 GMT

Yes, it should be in 5-6 files (or more)! The flashtimeline view is the familiar search view that shows search results, the search bar, etc etc.

Re: Warning/Error Banner messages

vsingla1 — Mon, 20 Oct 2014 18:06:31 GMT

It will be a great feature if this can be setup by role basis. Non-admin users do not need to see all those errors. It only creates unnecessary email chain and that too a big one. 🙂

Re: Warning/Error Banner messages

baerts — Thu, 02 Apr 2015 08:44:29 GMT

Is there anything new in 6.2.2 on how to control these messages in a better way?
I noticed somewhere in a script under templates/lib.html a reference to a variable DISABLE_MESSENGER but no reference as how to use this.