Splunk IT Service Intelligence

Threshold configuration for Monthly KPI



In our environment we have monthly jobs which runs on 1st of every month. I want to configure the KPI to check the job on 2nd of every month, if the job fails/error then it will trigger the KPI to notable events.

So please help me here how can i configure the KPI.

Mayana Khan

0 Karma

Splunk Employee
Splunk Employee

KPI scheduler allows for cron interval up to 15m max, and search window up to 24h max

Instead of a KPI, you may want to use a correlation search.
you use the cron notation for the scheduling, to run on the 2nd day of the month...

0 Karma
Get Updates on the Splunk Community!

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...