Running Rules at Specific Time

erikg · March 10, 2025, 3:22pm

Hello,

I am migrating some Watchers into Rules. I use cron schedule in Watcher to execute the alert at specific time, 6:30 am. The issue is I am not sure if this is possible in Kibana Rules? Or am I missing something?

richcollier · March 12, 2025, 4:15pm

github.com/elastic/kibana

Advance scheduling (cron syntax, etc).

opened 02:37AM - 12 Nov 19 UTC

mikecote

Feature:Alerting Feature:Task Manager R&D Team:ResponseOps Feature:Alerting/RulesFramework estimate:needs-research

For reference, Watcher allows some uber-flexible ways of scheduling, documented …as "triggers", documented here: https://www.elastic.co/guide/en/elasticsearch/reference/current/trigger-schedule.html I think I'd be happy with having our existing `interval` type scheduling and a `cron` one, and we can later add things like `hourly` if cron ends up being too obtuse for humans (it will). So, I think what should happen is we create a top-level `schedule` object that takes one of `interval` or `cron`, which should be fairly future-proof, as we can add more properties like `hourly` later. Note, this probably then also applies to Task Manager, as we attempt to move alerting's scheduling directly to task manager (seems like they are kinda independent right now).

Topic		Replies	Views
Setup Kibana Watcher to run during a particular window Kibana elastic-stack-alerting	2	409	July 8, 2019
Watcher Schedule Elasticsearch elastic-stack-alerting	2	330	January 13, 2021
Configuring Correct Monitor Schedule in Kibana: Have Schedule Set as 24 Hours or Throttle Action for 24 Hours? Kibana elastic-stack-alerting	2	314	September 9, 2022
Question on watcher trigger schedule - Activate from 6am to 10pm daily, run every 5 minutes Elasticsearch	3	2363	October 10, 2017
Specify timezone when trigger watchers Elasticsearch	4	1412	December 9, 2024

Running Rules at Specific Time

Related topics