Splunk AppDynamics

Health Rule Schedule

CommunityUser
Splunk Employee
Splunk Employee

How to setup Health Rule schedule for the below scenario. I need to avoid getting alerts between 8 AM to 2 PM.

Will the below schedule work?

Mon - 12 to 8 AM EST & 2 PM  to 11 PM EST

Monday

Start Time Cron Expression: 0 0 0,14 ? * 2

End Time Cron Expression:   0 0 8,23 ? * 2

Labels (1)
0 Karma
1 Solution

millerep
Contributor

Ahh ok, same logic, just instead of MON-FRI, you'll just have it kick off 2PM MON, and shut off at 8AM MON, so it'll run fine the other days. 

Here's some additional cron expression documentation which may help: https://docs.oracle.com/cd/E12058_01/doc/doc.1014/e12030/cron_expressions.htm

View solution in original post

millerep
Contributor

If you're just trying to supress an alert between 8am and 2 pm, then under "manage health rule schedules" when creating the health rule, you'll want a start time at 2pm and an end time at 8am. So it'll look something like this:

0 0 14 ? * MON-FRI

0 0 8 ? * MON-FRI

CommunityUser
Splunk Employee
Splunk Employee

Thanks Eric.

But we need to avoid alerts only on Monday 8 AM to 2 PM. Rest of the weekdays we need to be active on all time.

0 Karma

millerep
Contributor

Ahh ok, same logic, just instead of MON-FRI, you'll just have it kick off 2PM MON, and shut off at 8AM MON, so it'll run fine the other days. 

Here's some additional cron expression documentation which may help: https://docs.oracle.com/cd/E12058_01/doc/doc.1014/e12030/cron_expressions.htm

Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...