Splunk AppDynamics

Health rule Suppression

Sundarapandian_
Path Finder

Hello,

I have a healthrule suppression schedule enabled and it doesn't seem to be working as expected.

The requirement is to suppress or disable helathrule between 1 AM and 6 AM only on Sundays, and this the cron entry that i set up (see attached).

start time cron expression: * * 6 ? * 7

end time cron expression  : * * 1 ? * 7

If this is incorrect, please advise what needs to be modified. Thank you!

Labels (3)
0 Karma

Aniruddha_Salve
Engager

Hello,

Can you please mention the steps followed to achieve this.

Thank you.

0 Karma

millerep
Contributor

It's an old post, but essentially he's asking about how to do supress an action which is outlined in this document: https://docs.appdynamics.com/display/PRO45/Action+Suppression#ActionSuppression-ConfigureActionSuppr...

Once you're there, then follow his cron expression link above on what the syntax is.

You can also set this up when building your health rule as outlined in this document: https://docs.appdynamics.com/display/PRO45/Create+a+Health+Rule#CreateaHealthRule-Create_Manage_HRSc...

Which kind of has reverse logic. Usually you want the action to "start" when you want it to actually end supression, and then "end" when you want it to actually it to start, that way that "Health Rule" will only run everytime except the times you speecifically outlined to supress.

CommunityUser
Splunk Employee
Splunk Employee

I think you might have your start and end crossed so i switched them.  Also, for Sundays, shouldn't that be a '1' instead of a '7'?  Here's the result based on those adjustments.

start time cron expression: * * 1 ? * 1

end time cron expression  : * * 6 ? * 1

Here's a doc on cron format standards.

http://www.quartz-scheduler.org/documentation/quartz-2.1.x/tutorials/crontrigger

Sundarapandian_
Path Finder

Does anyone have an answer? 🙂

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...