Time-based Assignment of Notable Events

mgkaddoura · ‎02-13-2018

Hello

Is it possible to assign the default owner of the notable event based on a time schedule?

For example, if the notable event is triggered form 8:00 am till 4:00 PM, it will be assigned to Analyst 1 while from 4:00 PM to 11:00 PM for Analyst 2...

Regs,
M

starcher · ‎03-03-2018

Not without custom coding.

Time-based Assignment of Notable Events

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Join the Conversation

Time-based Assignment of Notable Events

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence