Refine your search:

Hey,

How can I remove/hide the red error bar which is displayed across the Splunk UI whenever an error occurs?

Thanks in advance for your help

asked 14 Oct '10, 17:01

Ant1D's gravatar image

Ant1D
59616
accept rate: 28%


2 Answers:

If your view (page) is written using the Simplified XML then there are a couple tricks but they're complicated or hacky or both.

However if you're already using the Advanced XML it's quite easy -- navigate to Manager > User Interface > Views > <your view here>

you should see some module tags with class="Message".

<module class="Message">
    ...stuff...
</module>

The 2 at the top are generally the ones that are responsible for displaying errors. You can just carefully comment those out. I don't really recommend this because I find that when people do this, a week or two later they'll be tearing their hair out with something that's not working and it ends up being because they have no way of seeing the error message that would make them slap their forehead...

So.... if you want to be more fine grained about it, (and sadly the Message module doesn't have very useful filtering), but you can follow the technique that the 'discover' app uses. Download that app from splunkbase, look in /appserver/static/application.js for references to Splunk.Module.Message and read the comments there. If you copy that block of javascript into your app you'll be able to do some useful filtering on what actual messages it does and does not display.

If you're stuck with the simplified XML and/or dont want to muck with application.js you can apply some CSS from /application/static/application.css to just suppress the display of the message module entirely::

div.Message {
    display:none;
}

but for the same reason I mention above, I'd only do this if you really really need to. And you might need to put it back when you're debugging.

link

answered 14 Oct '10, 17:12

nick's gravatar image

nick ♦
14.2k1318
accept rate: 46%

edited 14 Oct '10, 23:17

Thanks Nick. I understand what you are saying. Maybe I will switch it off when I am doing demos of my Splunk instance and then turn it back on when I am doing testing/debugging

(19 Oct '10, 15:03) Ant1D

The error message bar doesn't usually contain much helpful information

(19 Oct '10, 15:05) Ant1D

It will display search language errors though, like if you're not using quite the right argument and the report isnt working - that's the only clue you'll get.

(21 Oct '10, 06:17) nick ♦

You can edit the view and take out the Message module...

...

While this will remove it, you'll also not receive the messages you might need.

link

answered 14 Oct '10, 17:11

brettgladys's gravatar image

brettgladys
3114
accept rate: 0%

Thanks for the info brettgladys

(19 Oct '10, 15:09) Ant1D
Post your answer
toggle preview

Copyright © 2005-2012 Splunk, Inc. All rights reserved.