Dashboards & Visualizations

How to adjust the cron_schedule of a dashboard?

pavanae
Builder

I have a dashboard with cron_schedule as below. When is the cron schedule actually scheduled? And how to modify it to run every 5hr and look for time range of -4h?

savedsearches.conf

[My_search]
alt text
dispatch.earliest_time = -20m

0 Karma
1 Solution

cmerriman
Super Champion

cron_schedule = 20 /1 runs every hour on the 20th minute.

for every 5 hours:
cron_schedule = 0 */5 * * *

to have a range of 4 hours, you'll have to use the earliest=-4h@h and latest=now in your search

View solution in original post

0 Karma

cmerriman
Super Champion

cron_schedule = 20 /1 runs every hour on the 20th minute.

for every 5 hours:
cron_schedule = 0 */5 * * *

to have a range of 4 hours, you'll have to use the earliest=-4h@h and latest=now in your search

0 Karma

pavanae
Builder

So the dispatch.earliest_time = -20m should be replaced with dispatch.earliest_time = -4h or dispatch.earliest_time = -4h@h. @cmerriman

0 Karma

cmerriman
Super Champion

right. @h will snap it to the beginning of the hour.

0 Karma

pavanae
Builder

Could you also tell me the difference between -4h@h and -4h please? Thanks @cmerriman.

0 Karma

cmerriman
Super Champion

For example, if time was 5:06, -4h@h would put the earliest time at 1:00, but -4h would put it at 1:06. Does that make sense?

0 Karma

pavanae
Builder

yes thank you very much. @cmerriman.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...