Hi splunkers,
Is there any way to create an alert based on 1 second window?
Thanks,
No. The minimum should be minutes. see Use cron notation for scheduled alerts here : http://docs.splunk.com/Documentation/Splunk/6.2.2/Alert/Definescheduledalerts
No. The minimum should be minutes. see Use cron notation for scheduled alerts here : http://docs.splunk.com/Documentation/Splunk/6.2.2/Alert/Definescheduledalerts
thanks mate!