Disable the Create dropdown/button

[kmattern]

I have to severely limit my end users to exactly what they see on the screen. No options other than help or logout (both of which I have) They are also allowed to export and print. Nothing else. A "Create" dropdown appears on interactive forms. I have to have this dissappear. Does anyone know which module generates this artifact and/or how to disable it?

[sideview]

There's a module in Sideview Utils 2.0.X called 'SearchControls' that is intended to replace JobStatus.

In the final HTML it looks just like JobStatus but the code is completely different, and the big upside is that
a) you can configure exactly which controls you want to have in the view.
b) you can control the order of those controls.
c) one of the controls is a little 'export' button, which is lacking in JobStatus.

If you install Sideview Utils 2.0.10 on the system (Sideview Utils 2.0.X licensing has recently changed to being free for internal use). and you include the SideviewUtils module in the view(s), and you replace the JobStatus module with the SearchControls module, you'll be able to basically remove the 'Create' menus, and the 'Save' menu if you don't want those either.

http://sideviewapps.com/apps/sideview-utils/

[kmattern]

I found the answer myself. Using a new utility I wrote I was able to search all the HTML files to find the links I needed to block. This utility has become invaluable in customizing Splunk.

In $SPLUNK_HOME$\Splunk\share\splunk\search_mrsparkle\modules\jobs\JobStatus.html I commented out the lines referencing links with "Save" and "Create". Lines numbered 15 and 19.

For more info on the utility contact me at ken@esspc-llc.com