Good afternoon! I figured out how to set up alerts. Understood with the parameter: Cron Expression.
Currently I am using: */1 * * * * (run every minute).
Tell me how to run in seconds, I tried a lot of options, but the splunk swears - it gives an error. How, for example, to run every 30 or 40 seconds?
Thanks in advance!
Cron jobs do not support seconds -- I'm not sure why you need to run something this frequent?
Cron jobs do not support seconds -- I'm not sure why you need to run something this frequent?
Understood thanks!
Well, how to say, for demos and testing, such intervals are convenient.
You can try scheduling it as a real time search which causes it to run continously and process data as it comes in.