Skip to content

Update schedule-search.md #4330

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 19, 2024
Merged

Update schedule-search.md #4330

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 0 additions & 6 deletions docs/alerts/scheduled-searches/schedule-search.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,6 @@ This section describes how to create a Scheduled Search at the time you save a s

Choose the frequency with which the search should run from the available options:
* **Never**. Temporarily disables the scheduled search.
* **Real Time**. Sets up a [Real-Time Alert](create-real-time-alert.md). Note that receipt time is not supported with real-time frequency.
* **Every 15 Minutes**. Runs the search approximately every 15 minutes. There may be a delay of up to 5 minutes past the selected time or interval, but will maintain the 15-minute run frequency.
* **Hourly**. Executes the search every hour. We guarantee that hourly searches run every hour but not exactly at :00. May be delayed up to 10 minutes past the selected time or interval but will maintain the selected run frequency.
* **Every 2, 4, 6, 8, or 12 Hours**. Runs the search at intervals at the top of the hour you specify.
Expand All @@ -51,7 +50,6 @@ The maximum allowed time range for different Scheduled Search frequencies is as

| Frequency | Max Allowed Time Range |
|:-------------------|:-----------------------|
| Real Time | 15 minutes |
| 15 min | 1 Day |
| 15 min -1 hour | 7 Days |
| 1 hour - 3 hours | 15 Days |
Expand Down Expand Up @@ -90,10 +88,6 @@ In the next section, we'll walk you through the available Scheduled Search alert
When creating a Scheduled Search, you can configure various alert types, including:

* [Email](create-email-alert.md). You can create a Scheduled Search to alert you via email when a set of conditions are satisfied. A maximum of 120 emails are sent per day per Scheduled Search.
* [Real-Time](create-real-time-alert.md). Get continuous alerts for immediate notification of error conditions. Sumo Logic examines ingested data in a rolling window using the Time Range you define. Any time a new result is found, another email is sent.
:::warning limitations
Scheduled searches with a real-time run frequency do not support the **Use Receipt Time** option.
:::
* [Script Action](/docs/send-data/installed-collectors/sources/script-action). Trigger actions based on search results, such as firing SNMP traps.
* [ServiceNow Connection](/docs/alerts/webhook-connections/servicenow/). Integrate Sumo Logic search results with ServiceNow for issue investigation.
* [Webhook](/docs/alerts/webhook-connections/schedule-searches-webhook-connections). Send Sumo Logic alerts to third-party applications that accept incoming webhooks. For example, once you set up a Webhook connection in Sumo Logic, and create a Scheduled Search, then you can send an alert from that Scheduled Search as a post to a Slack channel, or integrate with third-party systems.
Expand Down