Knowledge Management

WHY does clearing a bulletin message notification also clear the message?


When I send out a bulletin message, it stays under "Messages" and stays sent out to users until I click the X on my own message notification. I click the X on my own message notification because it's annoying, just a notification, and I was the one to send the message so I obviously don't need a notification for it, lol?

My question is. Why. It's a completely unexpected functionality for the end user; apparently none of my users have ever seen any of my messages because I assumed no developer ever would make clearing the notification for your OWN message also delete the entire message distribution?? Isn't that why you have the "Messages" interface... to, you know, manage messages?

Would very much like some clarification here.


Because these are bulletin style messages, found in a single notification location (kvstore). Per-user preferences aren't stored, possibly due to the overhead....would be up to splunk to explain the philosophy of that.

You users might not have seen the messages if they weren't scoped for the correct audience, details can be found here:

If you don't want your users to be able to delete the notifications, you can take the delete_messages capability away:

However, as stated, the way that system is built it does not record per-user preferences regarding the messages displayed.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...