Splunk IT Service Intelligence

Threshold configuration for Monthly KPI



In our environment we have monthly jobs which runs on 1st of every month. I want to configure the KPI to check the job on 2nd of every month, if the job fails/error then it will trigger the KPI to notable events.

So please help me here how can i configure the KPI.

Mayana Khan

0 Karma

Splunk Employee
Splunk Employee

KPI scheduler allows for cron interval up to 15m max, and search window up to 24h max

Instead of a KPI, you may want to use a correlation search.
you use the cron notation for the scheduling, to run on the 2nd day of the month...

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...