# Run an alert check once starting from a timestamp **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [April 27, 2020, 4:04pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166 "2020-04-27T16:04:43Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![cukal](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cukal/32/4598_2.png) [@cukal](https://community.graylog.org/u/cukal)\ **Post date:** [April 27, 2020, 4:04pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166/1 "2020-04-27T16:04:43Z")
From the many posts about alerting I’m unable to find the best approach to: - Run an alert / check at 09:00AM in morning just once and send a notification if query returned results. - Sleep for another 24 hours, and repeat. I think I could do that with the alert “Search Within and Execute Search Every”. It would allow to run every 24 hours and that would be sufficient but how do I determine the start-time for it? Do I specifically enable the alert at a certain time (at 09:00AM in my case) and will it start counting to the next Execute Search interval specified, in this case 24h from when-I-enabled-it aka the next day again ± 09:00AM? Thanks! ---
**Author:** ![cukal](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cukal/32/4598_2.png) [@cukal](https://community.graylog.org/u/cukal)\ **Post date:** [April 29, 2020, 7:21pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166/2 "2020-04-29T19:21:56Z")
So I’m on my own? 😷 ---
**Author:** ![cukal](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cukal/32/4598_2.png) [@cukal](https://community.graylog.org/u/cukal)\ **Post date:** [May 2, 2020, 3:25pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166/3 "2020-05-02T15:25:42Z")
So do I create the notification and try some trial & error updating the _schedular\_job\_definitions_ & _schedule\_triggers collections_ or what do I do to get it to run once, every 09:00AM? ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [May 12, 2020, 2:52pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166/4 "2020-05-12T14:52:50Z")
he @cukal I guess you run the latest release 3.2? Such is not possible, but you could include a feature on Github for that: > **[Graylog2/graylog2-server](https://github.com/Graylog2/graylog2-server)** > > Free and open source log management. Contribute to Graylog2/graylog2-server development by creating an account on GitHub. ---
**Author:** ![cukal](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cukal/32/4598_2.png) [@cukal](https://community.graylog.org/u/cukal)\ **Post date:** [May 12, 2020, 4:17pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166/5 "2020-05-12T16:17:48Z")
Hi @jan , thanks for your reply. This requirement made me look at the API, I wasn’t aware Graylog had such a well executed API layer… I settled for a daily scheduled curl job to get what I’m after, pass the CSV into Gnuplot & inline replace the returned message \_id’s with a direct query link to Graylog and mail it as a report with manager-approved colouring and charts. High five’s around the table! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [May 26, 2020, 4:17pm UTC](https://community.graylog.org/t/run-an-alert-check-once-starting-from-a-timestamp/15166/6 "2020-05-26T16:17:57Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.