I need to create a blackout window from 4am to 4:15am. I am a CRON novice but I think the “best” way to do this is using multiple CRON expressions, something like:
0 * 0-3 * * *
0 15-59 4 * * *
0 * 5-23 * * *
As far as I can tell when creating a Monitor in OpenDistro Alerting you can only add one CRON expression, is there a way to do this or should support for multiple CRON expressions be added (feels like that should be done to cover many use cases)
I’m not sure if you can use multiple cron expressions, but in case that you can’t, use multiple alerts in the meantime
0 * 0-3 * * * this is invalid, the day only accepts values from 1-31 and has extra *
0 15-59 4 * * * this is invalid, the hour only accepts values from 0-23 and has extra *
0 * 5-23 * * * this is invalid, has an extra *
Maybe can use something like this to run and avoid 4am
0 0-3,5-23 * * *
this will run
2019-09-15 00:00:00
2019-09-15 01:00:00
2019-09-15 02:00:00
2019-09-15 03:00:00
2019-09-15 05:00:00
Thanks for the input, this alert needs to poll every 1 minute though not once an hour. Using multiple alerts is a valid workaround but its a pain and if you have enough alerts it becomes unmanageable.
Of note Watcher supports multiple CRON expressions like this, adding this feature to open distro would just be bringing it up to feature parity:
“cron”: [
“0 * 0-6 * * ?”,
“0 * 9-23 * * ?”,
“0 0-50 7 * * ?”,
“0 15-59 8 * * ?”
]