All Apps and Add-ons

How do I make a query that runs once and then disables in Splunk DB Connect?

rakesh44
Communicator

I have to run DB connect query only once.

What execution frequency do I have to set in Splunk DB Connect, if want I to run a query this coming Monday, which is 17th Dec 2018, and it should run only once?

Once it has ran, how do I disable the query from Splunk DB connect?

0 Karma
1 Solution

kmaron
Motivator

Build your input for the query and set your cron schedule to something like 1 0 17 12 * (this would be 1am on December 17th).
After your query runs you can either use the App GUI to disable it by clicking the disable switch or in the inputs.conf file you can set disable=1

View solution in original post

0 Karma

kmaron
Motivator

Build your input for the query and set your cron schedule to something like 1 0 17 12 * (this would be 1am on December 17th).
After your query runs you can either use the App GUI to disable it by clicking the disable switch or in the inputs.conf file you can set disable=1

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...