Schedule search to run every 15 seconds

Hello,

I was wondering if it's possible to schedule a search to run in increments less than 1 minute?

Thanks

asked 16 Aug '11, 12:58

samiomer
59●1●6
accept rate: 50%

Can you please specify exactly how often do you want to run this search?

(16 Aug '11, 13:31) mzorzi

I'd like it to run every 15 seconds. I'd also want it whenever it creates a new folder for the search to include those items it found in the last 15 seconds only so that result sets that get created won't have duplicates.

Thanks

(16 Aug '11, 13:52) samiomer

One Answer:

oldest newest most voted

1	I've ended up using Real Time for the search instead. Gives alerts instantaneously and have fixed my issues. The duplicates were stopped by using the Throttle option which supresses re-alerting for a specified period of time. link answered 18 Aug '11, 15:18 samiomer 59●1●6 accept rate: 50%

Post your answer

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

search ×1,686
alert ×132
schedule ×10
less ×1

Asked: 16 Aug '11, 12:58

Seen: 675 times

Last updated: 18 Aug '11, 15:18

Schedule search to run every 15 seconds

Follow this question

Splunk Resources

Related questions