Installation

Licensed Splunk Enterprise 6.5.0: How do I prevent "New maintenance" and "New version available" messages in Splunk Web?

rewritex
Contributor

I believe i'm on the most current version, I'm not clear on why I am getting these messages.. When I click on the links, it takes me to the general products screen of Splunk. When I clear the messages, they come back on next restart or login.

Question is - Do I need to upgrade something? If not, how do I stop the messages from coming up?

Version 6.5.0
Build 59c8927def0f

alt text

Labels (1)
1 Solution

masonmorales
Influencer

In web.conf, under the [settings] stanza, configure:
updateCheckerBaseURL = 0

View solution in original post

rpquinlan
Path Finder

I'm seeing this, and am on 6.6.3.

puneethgowda
Communicator

now we are in 6.6.2 the funny part here is still i am seeing below message

New maintenance version available. Click here for details.
New version available. Click here for details.

This is something *****

0 Karma

Heff
Splunk Employee
Splunk Employee

Only Admins see the notifications, Power User and User do not.

masonmorales
Influencer

In web.conf, under the [settings] stanza, configure:
updateCheckerBaseURL = 0

jagadeeshm
Contributor

I don't think this is working!

petercow
Path Finder

Agreed. Have it on my SHC too, and still see have Notification.

shawngarrettsgp
Path Finder

I also updated all my infrastructure with this, for whatever reason SHC members though they have the config (verified members via btool) they still show the message.

0 Karma

shawngarrettsgp
Path Finder

Actually I believe its a browser cache'ing issue, I just hoped on a different computer and it is indeed gone, woohoo.

0 Karma

masonmorales
Influencer

Is the setting configured on every SH in your SHC under $SPLUNK_HOME/etc/system/local/web.conf? Did you perform a rolling restart? I have the setting configured on my 6.5.3 SHC and do not see the message there. Also, the docs for 6.6.3 still indicate this is the correct method.

updateCheckerBaseURL = http://quickdraw.Splunk.com/js/
...
* Setting updateCheckerBaseURL to 0 will stop the SplunkWeb from pinging
  Splunk.com for new versions of itself.

Source: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Webconf

0 Karma

torndorff
Explorer

Did anyone ever get an answer to this? I dont want my production search head showing that we need to upgrade while we're still testing the next version in dev environments.

rlacher
Explorer

I'd be interested in knowing if there's a way to disable the notifications as well.

0 Karma

rewritex
Contributor

I can confirm upgrading removed them but previously, everytime I deleted them, they would come back and they would also pop up on "user" role accounts which was not what I wanted. I just ending up upgrading to 6.5.2...

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...