Refine your search:

Thanks For Downloading!

Review the documentation below and follow any custom installation steps. If no install steps are listed, most Splunk Apps and Add-ons can be installed as follows:

Windows: Decompress the downloaded file using a tool like 7-Zip and place the resulting folder into %PROGRAMFILES%\Splunk\etc\apps. Then restart Splunk using the splunk restart command or the GUI.

Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.

Description

A simple Add-on for throttling alerts generated by scheduled searches. This Add-on adds a new search command called throttle which takes in two arguments: name and period in seconds. This search command allows events to pass through only once during the specified period. For example the following search: "search abc | throttle name=xyz period=300" will return results only once every 5 minutes. To throttle alerts, create a custom alert condition just like you would before and append "| throttle name=<some-name-here> period=<throttle-period-in-seconds-here>". Please see the README.txt file for more info.

.

Versions and Release Notes

Version 1.1 (current version - updated Jun 01, 2010)
show older versions »
Version 1.0 (updated May 14, 2010)

posted 14 May '10, 17:57

Ledion%20Bitincka's gravatar image

Ledion Bitincka ♦
1.5k36
accept rate: 36%

new version 01 Jun '10, 20:52

Be the first one to review!

Did you find this app useful?

Preview toggle preview

Details

This app is not covered by any support agreements in place with Splunk. If you have questions about the installation or operation of this app, please contact the author.

Version 1.1
Last Updated: Jun 01, 2010
Download Add-on
Author: Ledion Bitincka
Version: 1.1
Splunk compatibility: 4.3, 4.2, 4.1, 4.x
Price: Free
License: Creative Commons BY-NC-SA 2.5
Downloads: 255

Follow this app

Log In to enable email subscriptions

RSS:

Reviews

Reviews + Comments

Related Apps

 
Copyright © 2005-2012 Splunk, Inc. All rights reserved.