https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312712#M5620 <P>Hi, does anyone know how to create a realtime alert which should trigger the alert only from Thursday 6PM to Sunday 6AM and any other day between 6PM to 6 AM ? </P> <P>the search query will be something similar to the below.</P> <P>index=wineventlog sourcetype="WinEventLog:Security" EventCode=4625 user="Administrator"</P> <P>I need to get an alert if this particular event occurs between Thursday 6PM to Sunday 6AM and any other day between 6PM to 6 AM.</P> <P>Can this be done in a single alert or do we have to create multiple alerts with different cron schedules. ? </P> <P>Looking forward to your suggestions. </P> <P>Regards<BR /> Sajin</P> Wed, 04 Apr 2018 07:47:28 GMT kpsajin 2018-04-04T07:47:28Z https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312712#M5620 <P>Hi, does anyone know how to create a realtime alert which should trigger the alert only from Thursday 6PM to Sunday 6AM and any other day between 6PM to 6 AM ? </P> <P>the search query will be something similar to the below.</P> <P>index=wineventlog sourcetype="WinEventLog:Security" EventCode=4625 user="Administrator"</P> <P>I need to get an alert if this particular event occurs between Thursday 6PM to Sunday 6AM and any other day between 6PM to 6 AM.</P> <P>Can this be done in a single alert or do we have to create multiple alerts with different cron schedules. ? </P> <P>Looking forward to your suggestions. </P> <P>Regards<BR /> Sajin</P> Wed, 04 Apr 2018 07:47:28 GMT https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312712#M5620 kpsajin 2018-04-04T07:47:28Z https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312713#M5621 <P>You can only have 1 cron schedule per alert. So you will need multiple alerts. </P> Wed, 04 Apr 2018 12:51:42 GMT https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312713#M5621 kmaron 2018-04-04T12:51:42Z https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312714#M5622 <P>At what frequency alert is running?</P> Wed, 04 Apr 2018 13:02:27 GMT https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312714#M5622 p_gurav 2018-04-04T13:02:27Z https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312715#M5623 <P>should run in realtime. And only on weekends and non-working hours. </P> Wed, 25 Apr 2018 08:46:21 GMT https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312715#M5623 kpsajin 2018-04-25T08:46:21Z https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312716#M5624 <P>have configured multiple alerts currently and wanted to find if it is possible in a single alert. </P> Wed, 25 Apr 2018 08:47:00 GMT https://community.splunk.com/t5/Alerting/Splunk-Alert-for-specific-time-period/m-p/312716#M5624 kpsajin 2018-04-25T08:47:00Z