help on splunk alert slot time and cron

[jip31]

hi

I try to configure my alert with an advanced slot time like this

earliest = -60m@m latest = -40m@m

But when I save, splunk tell me "The changes you have done to this alert slot time will be not saved" and "the slot time has not been updated, Change the alert type in order to modify the slot time"

what is wrong please?

And i try to use the cron below, but the cron is not taken into account

*/20****

Thanks for your help

[gcusello · Accepted solution]

Hi @jip31,

where did you try to change the time period in your alert or scheduled report?

you cannot do this in Alerts (or Reports) dashboard, you have to do this in [Settings > Searches, Reports and Alerts].

Ciao.

Giuseppe

[jip31]

Hi Gcusello

You are right, thanks

[gcusello]

Hi @jip31 ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉