Is there any way to globally disable auto-open?

[responsys_cm]

I know that it's possible to go into a dashboard's XML and disable auto-open. Is there any way to globally disable it? I find it to be a totally unnecessary distraction and I hate having to turn it off every time or manually edit every dashboard to get rid of it...

Thx.

Craig

[sideview · Accepted solution]

To a certain extent. In $SPLUNK_HOME/share/search_mrsparkle/modules/search/SearchBar.conf, you could find [param:autoOpenAssistant] and underneath that change the default from true to false. For each given user, that would effectively change the behavior on all views where either a) the view is marked as sticky="false", or where the view is sticky but the user has never clicked the auto-open links to change the state.

For any sticky view where the user's last interaction with auto-open was to turn it on, changing the default will have no effect.

One notable is that for the purposes of the above, the flashtimeline view in app A is a different view than the flashtimeline view in app B.

And one other significant problem to note is that this change will get overwritten each time you upgrade or reinstall Splunk.

[sideview]

I think the biggest problem is that you can turn off the persistence by setting 'isSticky' to "false". Many people have to do this, so that the TimeRangePicker can default to what's written in the XML, but then of course the "turn off auto-open" link wont work because all sticky state changes are now dead, and the auto-open link doesn't think to check the isSticky setting, so the end result is that the "auto-open" setting you pick for that view will effectively only last as long as you have the page open in the browser.

[responsys_cm]

Thanks, Nick! I hate AutoOpen. It's the most annoying, distracting feature of the UI. I wish that turning it off for a dashboard once would permanently disable it on that dashboard.