Splunk Search

How to delete a bulletin

richnavis
Contributor

I have a bulletin message indicating that a restart of the splunk service is required due to enabling/disabling a splunk App. I won't be restarting the app for a while so I would like to delete the bulletin Message. The splunk user interface allows me to navigate to a section called Mananger/UserInterface/Bulletin Messages, and provides a delete link. However clicking a link on the message I'd like to delete causes the following error...Error occurred attempting to remove MessageHandler:restart_required_reason_1: In handler 'messages': Failed to remove message: MessageHandler:restart_required_reason_1.

Any idea why I can't delete this message, and how to fix?

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You can clear restart messages by going here: http://splunkhost:8000/en-US/manager/search/control and pressing the button to do so.

martin_mueller
SplunkTrust
SplunkTrust

I'm looking at 6.0.0/6.0.1.

0 Karma

richnavis
Contributor

On which version? I'm at 5.01 I only have a single button to restart.. I'm logged in as admin..

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

There's two buttons on that page, one to restart and one to clear the message.

0 Karma

richnavis
Contributor

Perhaps I should have been more clear 😉 .. Is there a way to clear the restart message without restarting..

0 Karma

somesoni2
Revered Legend

You would have been seeing two bulletin messages I believe. restart_required and restart_required_1 or something like this. first delete restart_required and then other. Also, ensure you're logged in with admin account.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...