All Apps and Add-ons

How do I make a query that runs once and then disables in Splunk DB Connect?

rakesh44
Communicator

I have to run DB connect query only once.

What execution frequency do I have to set in Splunk DB Connect, if want I to run a query this coming Monday, which is 17th Dec 2018, and it should run only once?

Once it has ran, how do I disable the query from Splunk DB connect?

0 Karma
1 Solution

kmaron
Motivator

Build your input for the query and set your cron schedule to something like 1 0 17 12 * (this would be 1am on December 17th).
After your query runs you can either use the App GUI to disable it by clicking the disable switch or in the inputs.conf file you can set disable=1

View solution in original post

0 Karma

kmaron
Motivator

Build your input for the query and set your cron schedule to something like 1 0 17 12 * (this would be 1am on December 17th).
After your query runs you can either use the App GUI to disable it by clicking the disable switch or in the inputs.conf file you can set disable=1

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...