topic Re: How can I set up an alert to trigger every 30 minutes for a specified time range? in Alerting

How can I set up an alert to trigger every 30 minutes for a specified time range?

mahbs — Wed, 29 Nov 2017 09:54:29 GMT

Hi,
I want an alert to be triggered every 30 minutes from 7 p.m. to 11:30 p.m. only. I tried this but it doesn't seems to be working as expected.

Is this possible to do? I had a look at the cron expression and came up with something like this, but it's not working:

*/30 30,19,23 * * *

Please help!

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

harsmarvania57 — Wed, 29 Nov 2017 10:00:07 GMT

Hi @mahbs,

Please use cron schedule as */30 19-23 * * *

EDIT: Based on @niketnilay suggestion there might be chances that all search will not run at 0th minute and 30th minute due to load on splunk server so in that case you can use 0,30 19-23 * * * credit goes to @niketnilay 🙂

I hope this helps.

Thanks,
Harshil

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

mahbs — Wed, 29 Nov 2017 10:05:23 GMT

Thanks! But is it possible to get it from 19-23:30?

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

harsmarvania57 — Wed, 29 Nov 2017 10:07:57 GMT

Yes, this will run between 19 to 24 (19:00,19:30,20:00,20:30,21:00,21:30,22:00,22:30,23:00,23:30)

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

mahbs — Wed, 29 Nov 2017 10:30:09 GMT

Ah I see. Brilliant. Thanks!

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

harsmarvania57 — Wed, 29 Nov 2017 11:29:18 GMT

If my answer helps you then will you please accept my answer so that this question will be closed.

Thanks,
Harshil

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

niketn — Wed, 29 Nov 2017 11:54:21 GMT

@harsmarvania57, there is a slight difference to the following but it ensures that it runs at 0th minute and 30th minute of hour between 19 to 23. Running every 30 minutes /30 implies if one execution delays (possible due to load on Splunk instance at that particular time, then subsequent runs will also be delayed).

0,30 19-23 * *

I use Cron Tester provided at http://cron.schlitt.info/index.php for testing cron expressions: http://cron.schlitt.info/index.php?cron=0%2C30+19-23+*+*+*&iterations=20&test=Test

Re: How can I set up an alert to trigger every 30 minutes for a specified time range?

harsmarvania57 — Wed, 29 Nov 2017 12:06:29 GMT

@niketnilay Well Spotted, thanks 🙂