Splunk Search

How to write code for planned downtime in day wise

Luckyyyy
New Member
 
Labels (2)
0 Karma

yuanliu
SplunkTrust
SplunkTrust

Welcome to Splunk Answers, I guess? Because you forget to tell us what it entails to be a planned downtime.  Do you mean to shut down your Splunk instance for some time during a day?  Do you mean to not ingest data for some time during a day?  Do you mean not to display data in search/dashboard for some time during a day?  Do you mean to run scheduled search for some time during a day?  Do you mean not to send alerts for some time during a day?

What is the input to determine what time is downtime?  Is it hard coded?  Is it periodic?  Is it from some external data source?  Is it based on user selection?

Again, welcome to Splunk Answers.  But before you get answers, you must first volunteer answers to some basic questions a barber on the other side of the telephone line (otherwise known as volunteers) may need in order to give you a remote haircut.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...