Hello,
I have a setup an alert that checks the response time of a specific server constantly. My time range is -1m to now and I have scheduled this to run every minute. The alert occurs if the number of events is greater than 3.
The only issue I am having is that it is running 24/7 and I just want it to run during business hours 8am-6pm... is there someway to set it up like this?
Thank you for all your help/support
Try with cron schedule as * 8-17 * * *
“At every minute past every hour from 8 through 17, till 17:59)
Try with cron schedule as * 8-17 * * *
“At every minute past every hour from 8 through 17, till 17:59)
I'll try this! So just to clarify, this should allow it to run real time every minute from 8-17?
Thanks
By realtime every minutes do you mean a realtime search or historical search with new instance of the search executing every minute? You should be running a historical search (regular search with earliest and latest) not the real-time searches as they are expensive and never end.
I would also suggest to allow some buffer in your timerange to account for indexing delay. So instead of @m to -1m to now, use say -2m@m to -1m@m allowing 1 min for data to be indexed and become searchable.
Yes, historical data with new instance of the search executing every minute. This is great info, I will also modify my timerange. Thanks again!