Specify the scheduled time to send events to the Symantec Security Information Manager appliance, or leave this field blank if you want to collect events in real time. Time is entered in 24-hour clock time. You can schedule the collector to send events on a specific day, every day at a specified time, every week, or on a specified number of weeks.
The time that is specified in the Execution Time field must use the same time zone and system clock as the collector computer.
If the first batch has not finished before the second batch needs to start, the second batch is skipped. Execution Time syntax is as follows:
<Every day/Every n days/Every week/Every n weeks>
On <Sun/Mon/Tue/Wed/Thu/Fri/Sat> at <n:n:n>,<n:n:n>,
<Sun/Mon/Tue/Wed/Thu/Fri/Sat> at <n:n:n>,<n:n:n> Examples are as follows:
-
5:00:00
Send events every day at 5:00 a.m.
-
5:0:0,17:0:0
Send events every day at 5:00 a.m. and 5:00 p.m.
-
Every day at 7:0:0,19:0:0
Send events every day at 7:00 a.m. and 7:00 p.m.
-
Every 2 days at 0:0:0,12:0:0
Send events every other day at midnight and noon.
If a specified time has not passed, events are sent on the same day; if a specified time has already passed, events are
sent in 2 days.
-
On Sun, Wed at 8:30:0,20:30:0
Send events on Sunday and Wednesday at 8:30 a.m. and 8:30 p.m.
(This value is the same as Every Week on Sun, Wed at 8:30,20:30.)
-
Every week on Mon, Fri at 7:0:0,14:0:0
Send events on Monday and Friday at 7:00 a.m. and 2:00 p.m.
(This value is the same as On Mon, Fri at 7:0:0,14:0:0.)
-
Every 2 weeks on Tue, Sat at 7:0:0,19:0:0
Send events every 2 weeks on Tuesday and Saturday at 7:00 a.m. and 7:00 p.m.
-
Every 3 weeks on Thu at 7:0:0, Tue at 7:0:0,14:0:0
Send events every 3 weeks on Thursday at 7:00 a.m. and on Tuesday at both 7:00 a.m. and 2:00 p.m.
|