https://community.splunk.com/t5/Splunk-Enterprise-Security/Time-based-Assignment-of-Notable-Events/m-p/293457#M2574 <P>Hello</P> <P>Is it possible to assign the default owner of the notable event based on a time schedule?</P> <P>For example, if the notable event is triggered form 8:00 am till 4:00 PM, it will be assigned to Analyst 1 while from 4:00 PM to 11:00 PM for Analyst 2...</P> <P>Regs,<BR /> M</P> Wed, 14 Feb 2018 05:38:45 GMT mgkaddoura 2018-02-14T05:38:45Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Time-based-Assignment-of-Notable-Events/m-p/293457#M2574 <P>Hello</P> <P>Is it possible to assign the default owner of the notable event based on a time schedule?</P> <P>For example, if the notable event is triggered form 8:00 am till 4:00 PM, it will be assigned to Analyst 1 while from 4:00 PM to 11:00 PM for Analyst 2...</P> <P>Regs,<BR /> M</P> Wed, 14 Feb 2018 05:38:45 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Time-based-Assignment-of-Notable-Events/m-p/293457#M2574 mgkaddoura 2018-02-14T05:38:45Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Time-based-Assignment-of-Notable-Events/m-p/293458#M2575 <P>Not without custom coding. </P> Sat, 03 Mar 2018 10:52:19 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Time-based-Assignment-of-Notable-Events/m-p/293458#M2575 starcher 2018-03-03T10:52:19Z