https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311726#M10823 <P>For some reason, our network goes crazy every day from 2:30 to 2:35.<BR /> I'm trying to schedule a daily alert that will perform a search from 2:30 to 2:35 and report on that data if it's bad/slow.<BR /> I've created a daily scheduled alert that "Runs every day" at 15:00.</P> <P>I then tried to specify my search with an "Advanced" time range of -30min for "Earliest" and -25min for "Latest" but Splunk doesn't like this.</P> <P>How can I have an alert that is run daily that will only search for the specific time range of 2:30 - 2:35?</P> Wed, 05 Apr 2017 21:17:08 GMT theironcook 2017-04-05T21:17:08Z https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311726#M10823 <P>For some reason, our network goes crazy every day from 2:30 to 2:35.<BR /> I'm trying to schedule a daily alert that will perform a search from 2:30 to 2:35 and report on that data if it's bad/slow.<BR /> I've created a daily scheduled alert that "Runs every day" at 15:00.</P> <P>I then tried to specify my search with an "Advanced" time range of -30min for "Earliest" and -25min for "Latest" but Splunk doesn't like this.</P> <P>How can I have an alert that is run daily that will only search for the specific time range of 2:30 - 2:35?</P> Wed, 05 Apr 2017 21:17:08 GMT https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311726#M10823 theironcook 2017-04-05T21:17:08Z https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311727#M10824 <P>I was able to perform an alert. What is the problem?</P> <PRE><CODE>Cron schedule：0 15 * * * index=* earliest=-30m@m latest =-25m@m </CODE></PRE> <P><span class="lia-inline-image-display-wrapper"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2723i89BC28AB0D7B8F99/image-size/large?v=v2&amp;px=999" title="alt text" alt="alt text" /></span></P> Thu, 06 Apr 2017 06:14:44 GMT https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311727#M10824 HiroshiSatoh 2017-04-06T06:14:44Z https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311728#M10825 <P>Thank you Hiroshi,<BR /> Yes, if I use the chron syntax everything works well. The issue was when I tried to use the "Run every day of the week" option and specify a time.<BR /> But the chron syntax works perfectly. Thank you.</P> Mon, 10 Apr 2017 18:40:45 GMT https://community.splunk.com/t5/Alerting/Trouble-Scheduling-Alert-With-Search-For-Specific-Time-Range/m-p/311728#M10825 theironcook 2017-04-10T18:40:45Z