Hi, does anyone know how to create a realtime alert which should trigger the alert only from Thursday 6PM to Sunday 6AM and any other day between 6PM to 6 AM ?
the search query will be something similar to the below.
index=wineventlog sourcetype="WinEventLog:Security" EventCode=4625 user="Administrator"
I need to get an alert if this particular event occurs between Thursday 6PM to Sunday 6AM and any other day between 6PM to 6 AM.
Can this be done in a single alert or do we have to create multiple alerts with different cron schedules. ?
Looking forward to your suggestions.