i think it really depends on your use case. typically i would prefer to use the native splunk scheduling, but 150+ near identical reports reports being run on the first of each month, interfering with interactive splunk users, and occasionally exhausting cluster resources was not ideal. im using a scheduled ci-cd process that executes this job in a docker container.
... View more