Getting Data In

Is it possible to configure scripted input to run at a certain time in the day?

remy06
Contributor

Hi,

Currently via the web UI I believe we can only set the interval time for scripted inputs to run.

Is it possible to schedule the script to run at a certain time of a day?say 23:59? instead of intervals?

1 Solution

gkanapathy
Splunk Employee
Splunk Employee

Yes it is. If you specify interval as a cron-type schedule, it will run on that schedule. From inputs.conf.spec:

interval = <integer>|<cron schedule>
* How often to execute the specified command (in seconds), or a valid cron schedule. 
* NOTE: when a cron schedule is specified the script is not executed on start up
* Defaults to 60 seconds.

So you can set:

interval = 59 23 * * *

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

Yes it is. If you specify interval as a cron-type schedule, it will run on that schedule. From inputs.conf.spec:

interval = <integer>|<cron schedule>
* How often to execute the specified command (in seconds), or a valid cron schedule. 
* NOTE: when a cron schedule is specified the script is not executed on start up
* Defaults to 60 seconds.

So you can set:

interval = 59 23 * * *

Lowell
Super Champion

If I am not mistaken, this is a new feature in 4.1.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...