Alerting

Scheduled searches stuck in past?

ebs
Communicator

Hi, 

I have two scheduled searches that aren't running anymore and I've no idea why. The cron is correct, when running the search there are results but I'm not receiving any alerts. Checking the next scheduled time today I noticed that the next scheduled search was dated several days in the past.

I've tried adjusting the cron schedule but that didn't work I've also tried disabling and renenabling the search but it hasn't resolved it either.

 

It is Splunk Cloud.

Labels (2)
0 Karma

cesaccenturefed
Path Finder

We are seeing the same behavior, will update if we figure out a root cause or issue. 

0 Karma

pratibha0610
Explorer

@cesaccenturefed : did you see any solution for this issue?

0 Karma

jodonald
Explorer

please post your cron schedule

0 Karma

ebs
Communicator

I have two searches this is occuring for:

1) */5 * * * *
2) */15 * * * *

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...