All Apps and Add-ons

Disabling splunk notifications for specific roles globally

ejahnke
Explorer

Hey everyone,

I'm currently trying to disable splunk notifications (the little popups under "Messages") for specific roles. Or in other words: I only want the admin role to see notifications.

I'm aware of the per stanza "roles" option in messages.conf, but I don't want to set the specific roles for every messages. Another reason why I don't want to do it per stanza is, because I don't want to check every new add-on and app for a messages.conf.

I tried

[default]
roles = admin

in system/local just because and for some reason my test user didn't get any new messages, while my admin user continued to get new ones.
But that seemed to be lucky coincidence because logs with the MessagesManager stated:

 

WARN  MessagesManager - MessagesManager: Skipping component 'default': No name field loaded

 

That was kinda expected because the [default] stanza ist not mentioned in the messages.conf documentation.

Is there a way to limit the scope on a global scale?

Best regards,

Eric

Labels (3)
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...