Knowledge Management

Splunk summary index script automation

ram254481493
Explorer

Hello , Currently i have an summary index script which i have to run manually now everyday at 9 pm , i am thinking to automate it using linux cron job , is their a way to do it , if anyone could help how can i automate the command to run everyday at 9 pm on linux.

Below is my summary index script :
./splunk cmd python fill_summary_index.py -app search -name "xxxxxxxx" -et 1546754401 -lt 1547359201-j 2 -owner xxx -auth admin:changeme

i want it to automate and run everyday 9 pm ?

Tags (1)
0 Karma

stoutrw
Path Finder

If you have to do a linux cron job, put the command in place using crontab. Your schedule should look something like this.

https://crontab.guru/#0_21_*_*_*

0 Karma

koshyk
Super Champion

why you are using Linux cron? Can it be a savedsearch within Splunk scheduled for a time?

0 Karma

ram254481493
Explorer

No you cant use it as a saved search , this command needs to run from backend , so i am still working in it once i am done if successfull i will post my configs.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...