Splunk IT Service Intelligence

Threshold configuration for Monthly KPI



In our environment we have monthly jobs which runs on 1st of every month. I want to configure the KPI to check the job on 2nd of every month, if the job fails/error then it will trigger the KPI to notable events.

So please help me here how can i configure the KPI.

Mayana Khan

0 Karma

Splunk Employee
Splunk Employee

KPI scheduler allows for cron interval up to 15m max, and search window up to 24h max

Instead of a KPI, you may want to use a correlation search.
you use the cron notation for the scheduling, to run on the 2nd day of the month...

0 Karma