Warning/Error Banner messages

[rmorlen]

I would like to suppress all messages in the search app. It would be nice to be able to suppress then by role so that Admins see the messages but Users don't.

Any suggestions on how to do this?

Currently we are using Splunk 4.2.5.

[vsingla1]

It will be a great feature if this can be setup by role basis. Non-admin users do not need to see all those errors. It only creates unnecessary email chain and that too a big one. 🙂

[baerts]

Is there anything new in 6.2.2 on how to control these messages in a better way?
I noticed somewhere in a script under templates/lib.html a reference to a variable DISABLE_MESSENGER but no reference as how to use this.

[lguinn2]

AFAIK, there is no way to do this by role. You can, however, edit the views in the search app so that no one gets the messages. You can also filter the messages so that not all messages appear; this might be some improvement, even if it isn't perfect.

Look at the Messaging Module reference for more info.

[lguinn2]

Yes, it should be in 5-6 files (or more)! The flashtimeline view is the familiar search view that shows search results, the search bar, etc etc.

[rmorlen]

I looked at that information but couldn't figure out where in the search app views the banner is displayed. I see the Message module referenced in about 5-6 files.