Splunk Search

What do the start time and the stop time of a SignalFlow job mean?

Z_Jacob
Engager

Don't know why there is not a location for "SignalFx" related questions.

According to SignalFlow API doc: https://dev.splunk.com/observability/reference/api/signalflow/latest#endpoint-start-signalflow-compu... there is a "start" parameter and a "stop" parameter. And I'm totally confused by the explanation:

"The date and time that the computation should start/stop, in *nix time"

Let's say current time is "2021-09-22 20:27:00" (America/Los_Angeles)

What if I chose a time range in the past:

  1. what will happen if the start time equals the stop time? Am I supposed to get nothing cause the computation stops immediately? And How to understand it that the computation should start/stop yesterday?
    • start:  2021-09-21 00:00:00
    • stop:  2021-09-21 00:00:00
  2. what will happen if the stop time is greater than the start time?  Am I supposed to wait for 2 hours for a computation start/stop yesterday?
    • start:  2021-09-21 00:00:00
    • stop:  2021-09-22 02:00:00

And what if I chose a time range in the future?

  1. what will happen if the start time equals the stop time? Am I supposed to get nothing cause the computation stops immediately? And am I supposed to wait until "2021-09-23 00:00:00" for the computation to start?
    • start:  2021-09-23 00:00:00
    • stop:  2021-09-23 00:00:00
  2. what will happen if the stop time is greater than the start time?  Am I supposed to wait for 2 hours for a computation start/stop in the future?
    • start:  2021-09-23 00:00:00
    • stop:  2021-09-23 02:00:00
Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...