All Apps and Add-ons

How do I make a query that runs once and then disables in Splunk DB Connect?

rakesh44
Communicator

I have to run DB connect query only once.

What execution frequency do I have to set in Splunk DB Connect, if want I to run a query this coming Monday, which is 17th Dec 2018, and it should run only once?

Once it has ran, how do I disable the query from Splunk DB connect?

0 Karma
1 Solution

kmaron
Motivator

Build your input for the query and set your cron schedule to something like 1 0 17 12 * (this would be 1am on December 17th).
After your query runs you can either use the App GUI to disable it by clicking the disable switch or in the inputs.conf file you can set disable=1

View solution in original post

0 Karma

kmaron
Motivator

Build your input for the query and set your cron schedule to something like 1 0 17 12 * (this would be 1am on December 17th).
After your query runs you can either use the App GUI to disable it by clicking the disable switch or in the inputs.conf file you can set disable=1

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...