Dear All,
I am working on scheduling alert may i know how to schedule a alert in every 3 hours?
Thanks
Gajanna Hiroji
Use this cron schedule:
0 */3 * * *
That will run the alert at 00:00, 03:00, ..., 21:00. Make sure you don't have a huge bunching up around a specific minute if the minute isn't important to your report, so use maybe 1 */3 * * *
for some and 2 */3 * * *
for others.
Use this cron schedule:
0 */3 * * *
That will run the alert at 00:00, 03:00, ..., 21:00. Make sure you don't have a huge bunching up around a specific minute if the minute isn't important to your report, so use maybe 1 */3 * * *
for some and 2 */3 * * *
for others.
Hi,
You Can use cron schedule: Link below http://docs.splunk.com/Documentation/Splunk/6.0.1/Alert/Definescheduledalerts#Schedule_the_alert
It looks like:
*/5 * * * * : Every 5 minutes
*/30 * * * * : Every 30 minutes
0 */12 * * * : Every 12 hours, on the hour
*/20 * * * 1-5 : Every 20 minutes, Monday through Friday
0 9 1-7 * 1 : First Monday of each month, at 9am.