Knowledge Management

WHY does clearing a bulletin message notification also clear the message?

nick405060
Motivator

When I send out a bulletin message, it stays under "Messages" and stays sent out to users until I click the X on my own message notification. I click the X on my own message notification because it's annoying, just a notification, and I was the one to send the message so I obviously don't need a notification for it, lol?

My question is. Why. It's a completely unexpected functionality for the end user; apparently none of my users have ever seen any of my messages because I assumed no developer ever would make clearing the notification for your OWN message also delete the entire message distribution?? Isn't that why you have the "Messages" interface... to, you know, manage messages?

Would very much like some clarification here.

solarboyz1
Builder

Because these are bulletin style messages, found in a single notification location (kvstore). Per-user preferences aren't stored, possibly due to the overhead....would be up to splunk to explain the philosophy of that.

You users might not have seen the messages if they weren't scoped for the correct audience, details can be found here:
https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Customizeuserexperience

If you don't want your users to be able to delete the notifications, you can take the delete_messages capability away:
https://docs.splunk.com/Documentation/Splunk/7.3.1/Security/Rolesandcapabilities

However, as stated, the way that system is built it does not record per-user preferences regarding the messages displayed.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...