Graylog event definiton of runtime

MoerkyMark · April 23, 2022, 1:31pm

When defining an event with graylog that triggers a notification I can’t find where I can set the execution time of that event. Its always the time I save it, but what if I want a specific time?

I can see on the Status page: runnable, Last execution, Next execution, Next timerange
… but where can I set the execution manually?

Maybe I missed something conceptional, my version of Graylog v4.1.5+01c9198…

patrickmann · April 25, 2022, 9:38am

Currently you cannot specify a specific execution time. There’s already an open issue tracking it:

github.com/Graylog2/graylog2-server

Ability to specify when a filter/aggregation event is evaluated

opened 06:26AM - 28 Mar 22 UTC

patrickmann

feature triaged alerting

## What? Add an optional evaluation time-of-day field to the filter/aggregation… definition. * Default is the event creation time * Event evaluation is scheduled at this time, instead of implicitly at the creation time. * Field needs to be persisted so it can be included in content packs ## Why? The definition of a filter/aggregation event includes the frequency at which it is evaluated. However, you cannot specify when to start, i.e. at what time the filter/aggregation conditions will be evaluated. We simply start evaluation as soon as the event is defined. This behavior makes it difficult to e.g. ensure correlated events are run in a specific order. In particular: when events are defined via a content pack, they are essentially all created at the same time. ## Your Environment * Graylog Version: 4.3

system · May 9, 2022, 9:39am

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Event Definition Summary Graylog Central (peer support)	6	584	September 22, 2022
Event Definitions - "Search within the last" unique matches Graylog Central (peer support)	3	851	October 18, 2019
Event definition help Graylog Central (peer support)	6	884	July 8, 2020
Graylog 3.1 Alert Notification using Event Definition with Aggregation Graylog Central (peer support)	15	2464	January 5, 2020
Would like an Event to notify me if certain stream is inactive but only during specific hours Graylog Central (peer support)	10	428	February 7, 2023

Graylog event definiton of runtime

Related Topics