There is no way to automatically shut off the correlation searches based on time. It is a manual process. You can only put the services and entities into maintenance. https://docs.splunk.com/Documentation/ITSI/4.2.1/Configure/MaintenanceWindows Even though this is an old post, I figured I would answer it because there are a lot of new people coming into the application. Also, If this is something you feel needs to be a feature of the maintenance process, then put in an enhancement. It is voted on, so get all your friends and coworkers to vote.
... View more