Splunk Search

How to determine if searches are being executed each hour the number of times expected per their cron configuration

Vignesh-107
Path Finder

I have a saved search need to check the each hour the search is being executed based on the cron configuration.


Expected Result:

Savedsearch NameCron configNumber of time executedSearch
Sav1  */5 * * * *12Search ran all 12 times
Sav2*/10 * * * *6Search skipped at 5 run

 

 

Labels (1)
0 Karma
1 Solution

gjanders
SplunkTrust
SplunkTrust

In alerts for splunk admins https://splunkbase.splunk.com/app/3796/ there is an example alert for skipped searches and the reason

 

This finds which searches were skipped.

View solution in original post

gjanders
SplunkTrust
SplunkTrust

In alerts for splunk admins https://splunkbase.splunk.com/app/3796/ there is an example alert for skipped searches and the reason

 

This finds which searches were skipped.

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...