Knowledge Management

Splunk summary index script automation

ram254481493
Explorer

Hello , Currently i have an summary index script which i have to run manually now everyday at 9 pm , i am thinking to automate it using linux cron job , is their a way to do it , if anyone could help how can i automate the command to run everyday at 9 pm on linux.

Below is my summary index script :
./splunk cmd python fill_summary_index.py -app search -name "xxxxxxxx" -et 1546754401 -lt 1547359201-j 2 -owner xxx -auth admin:changeme

i want it to automate and run everyday 9 pm ?

Tags (1)
0 Karma

stoutrw
Path Finder

If you have to do a linux cron job, put the command in place using crontab. Your schedule should look something like this.

https://crontab.guru/#0_21_*_*_*

0 Karma

koshyk
Super Champion

why you are using Linux cron? Can it be a savedsearch within Splunk scheduled for a time?

0 Karma

ram254481493
Explorer

No you cant use it as a saved search , this command needs to run from backend , so i am still working in it once i am done if successfull i will post my configs.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...