Splunk Search

How to write code for planned downtime in day wise

New Member
Labels (2)
0 Karma


Welcome to Splunk Answers, I guess? Because you forget to tell us what it entails to be a planned downtime.  Do you mean to shut down your Splunk instance for some time during a day?  Do you mean to not ingest data for some time during a day?  Do you mean not to display data in search/dashboard for some time during a day?  Do you mean to run scheduled search for some time during a day?  Do you mean not to send alerts for some time during a day?

What is the input to determine what time is downtime?  Is it hard coded?  Is it periodic?  Is it from some external data source?  Is it based on user selection?

Again, welcome to Splunk Answers.  But before you get answers, you must first volunteer answers to some basic questions a barber on the other side of the telephone line (otherwise known as volunteers) may need in order to give you a remote haircut.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...