All Apps and Add-ons

Is this interval field in the inputs.conf in seconds or minutes?

jeremyhagand61
Communicator

Hi,

Is this interval field in the inputs.conf in seconds or minutes?

Cheers,
Jeremy

Labels (1)
0 Karma
1 Solution

damien_chillet
Builder

Hi jeremy,

The interval field is in seconds:

interval = [<number>|<cron schedule>]
* How often to run the specified command (in seconds), or a valid cron
  schedule.
* NOTE: when you specify a cron schedule, the input does not run the
  script on start-up.
* If you specify the interval as a number, it may have a fractional
  component; e.g., 3.14
* The cron implementation for data inputs does not currently support names
  of months or days.
* Defaults to 60.0 seconds.
* The special value 0 forces this scripted input to be run continuously;
  that is, as soon as the script exits, the input restarts it.
* The special value -1 causes the scripted input to run once on start-up.

as per in http://docs.splunk.com/Documentation/Splunk/latest/Admin/Inputsconf
You can usually find this kind of information directly in splunk docs 🙂

View solution in original post

damien_chillet
Builder

Hi jeremy,

The interval field is in seconds:

interval = [<number>|<cron schedule>]
* How often to run the specified command (in seconds), or a valid cron
  schedule.
* NOTE: when you specify a cron schedule, the input does not run the
  script on start-up.
* If you specify the interval as a number, it may have a fractional
  component; e.g., 3.14
* The cron implementation for data inputs does not currently support names
  of months or days.
* Defaults to 60.0 seconds.
* The special value 0 forces this scripted input to be run continuously;
  that is, as soon as the script exits, the input restarts it.
* The special value -1 causes the scripted input to run once on start-up.

as per in http://docs.splunk.com/Documentation/Splunk/latest/Admin/Inputsconf
You can usually find this kind of information directly in splunk docs 🙂

Mallikarjuna
Splunk Employee
Splunk Employee

Will interval = -1 also gets executed when below API is called

http://host:8089/services/apps/local/_reload
0 Karma
Get Updates on the Splunk Community!

The Great Resilience Quest: 5th Leaderboard Update

The fifth leaderboard update for The Great Resilience Quest is out &gt;&gt; &#x1f3c6; Check out the ...

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...