Is it possible to configure a forwarder to run a Powershell script to collect data at a certain time rather than setting an interval?

[mtmoore]

In Inputs.conf you can set an interval that a powershell script runs to collect data... but can you somehow set the forwarder to run the PS script at a certain time of the day, every day, to collect data? i.e. run once, every day at 12pm..

Any ideas?

Thanks,
Marcus

[halr9000 · Accepted solution]

I would use the PowerShell add-on with its cron format, which does allow time of day scheduling.

https://apps.splunk.com/app/1477/

[mtmoore]

Thankyou very much, will look into this.

[linu1988]

not that we can't set without the powershell addon. In interval we can specify a valid cron schedule for any input type.

interval= 0 12 * * *