I am trying to post a bulletin message via the Splunk WebUI. Strangely enough it does not seem to be visible to anyone but myself. Is it possible to fix this so that we can post messages from the WebUI to all our users?
Use below curl command to create bulletin message for all Users. I have found this doesn't work in SHC cluster and one would need to run curl command for each search head.
curl -k -u (splunk_api_user):(splunk_api_user_password) https://:8089/services/messages -d name=splunk_test_msg -d value="Splunk Test Message" -d severity="info"
I found an old thread where this question was already asked and answered.
Maybe it will help you:
Settings » User interface » Bulletin Messages » Add new
https://answers.splunk.com/answers/368471/how-to-display-a-bulletin-message-in-splunk-web-fo.html
Ik know how to create a bulletin message. Unfortunately, done this way the message does not seem to be visible to anyone but myself which, off course, makes it totally useless.
Use below curl command to create bulletin message for all Users. I have found this doesn't work in SHC cluster and one would need to run curl command for each search head.
curl -k -u (splunk_api_user):(splunk_api_user_password) https://:8089/services/messages -d name=splunk_test_msg -d value="Splunk Test Message" -d severity="info"
Yes, I am an admin.