Hi All, I have 300+  Splunk alerts which are pointing to webhook endpoint "A" but soon I have a migration planned for the webhook.  All the 300 + alerts need to be edited so the webhook endpoint points to "B" I was wondering if there is an easy way of bulk editing all the alerts rather than doing it individually for each alert.    Thanks. ... View more

Hello Everyone,   I have an alert that runs every 15 minutes and checks logs for last 15 minute time span. I want the alert to not run for 1:30 am cycle.  Currently I am using the cron expression */15 0-1,2-23 * * * But this will skip all schedules between 1 -2 am [1:00, 1:15, 1:30, 1:45] Is there anyway I can only skip the alert scheduled at 1:30 am (searches time range 1:15:00 to 1:30:00 ) within one cron schedule.  I know it can be done easily with 2 schedules but was wondering if this can be achieved within one CRON expression.   Thanks. ... View more