How do I add multiple cron jobs given 1 alert? I have to setup alert traffic by customer, if there are none for the last 15 minutes for example send an alert, however during non-business hours (ie. 1AM-3AM or weekends), just have to check every hour then send an alert. Is this at all possible without duplicating the alert?
Hello!
I'm sorry, but that is not yet possible with splunk without duplicating alerts! Means,
- One alert for the 15 minutes there are no customers
- One alert cron at 1AM-3AM
- One alert for the weekends
Thanks