Getting Data In

Is it possible to configure scripted input to run at a certain time in the day?

remy06
Contributor

Hi,

Currently via the web UI I believe we can only set the interval time for scripted inputs to run.

Is it possible to schedule the script to run at a certain time of a day?say 23:59? instead of intervals?

1 Solution

gkanapathy
Splunk Employee
Splunk Employee

Yes it is. If you specify interval as a cron-type schedule, it will run on that schedule. From inputs.conf.spec:

interval = <integer>|<cron schedule>
* How often to execute the specified command (in seconds), or a valid cron schedule. 
* NOTE: when a cron schedule is specified the script is not executed on start up
* Defaults to 60 seconds.

So you can set:

interval = 59 23 * * *

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Yes it is. If you specify interval as a cron-type schedule, it will run on that schedule. From inputs.conf.spec:

interval = <integer>|<cron schedule>
* How often to execute the specified command (in seconds), or a valid cron schedule. 
* NOTE: when a cron schedule is specified the script is not executed on start up
* Defaults to 60 seconds.

So you can set:

interval = 59 23 * * *

Lowell
Super Champion

If I am not mistaken, this is a new feature in 4.1.

0 Karma
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened Audit Trail v2 wasn’t written in isolation—it was shaped by your voices. In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...