Skip to main content

1E 23.11 (SaaS)

Interval

Trigger

WindowsEventLog

Action

Triggers periodically at the specified frequency (IntervalSeconds, IntervalMinutes or IntervalHours), allowing a rule to be evaluated at the given interval.

Parameters

Note

Only one parameter is allowed. You must provide exactly one of IntervalSeconds, IntervalMinutes or IntervalHours.

IntervalSeconds (integer): The frequency of the trigger in seconds. Minimum value is 30 seconds; Maximum value is 604,800 seconds (i.e. one week)

IntervalMinutes (integer): The frequency of the trigger in minutes. Minimum value is 1 minute; Maximum value is 10,080 minutes (one week).

IntervalHours (integer): The frequency of the trigger in hours. Minimum value is 1 hour; Maximum value is 168 (one week).

Example

IntervalHours

<?xml version="1.0" encoding="UTF-8"?>
<TriggerTemplate Name="IntervalHours" Category="Basic" Description="Periodic (hours)" Type="Interval" ReadablePayload="Every %intervalHours% hours">
  <AgentParameters>
    <Parameter Name="IntervalHours" Value="%intervalHours%" />
  </AgentParameters>
  <UserParameterJson><![CDATA[[{"Name":"IntervalHours","Pattern":"%intervalHours%","DataType":"int","ControlType":"freeText","ControlMetadata":null,"Placeholder":"number of hours","DefaultValue":"12",
"Validation":{"Regex":"[0-9]{1,3}","MaxLength":"3","AllowedValues":null,"NumValueRestrictions":null},"Value":null,"HintText":null,"Source":null}]]]></UserParameterJson>
</TriggerTemplate>

IntervalMinutes

<?xml version="1.0" encoding="UTF-8"?>
<TriggerTemplate Name="IntervalMinutes" Category="Basic" Description="Periodic (minutes)" Type="Interval" ReadablePayload="Every %intervalMinutes% minutes">
  <AgentParameters>
    <Parameter Name="IntervalMinutes" Value="%intervalMinutes%" />
  </AgentParameters>
  <UserParameterJson><![CDATA[[{"Name":"IntervalMinutes","Pattern":"%intervalMinutes%","DataType":"int","ControlType":"freeText","ControlMetadata":null,"Placeholder":"number of minutes","DefaultValue":"30",
"Validation":{"Regex":"[0-9]{1,5}","MaxLength":"5","AllowedValues":null,"NumValueRestrictions":null},"Value":null,"HintText":null,"Source":null}]]]></UserParameterJson>
</TriggerTemplate>

IntervalSeconds

<?xml version="1.0" encoding="UTF-8"?>
<TriggerTemplate Name="IntervalSeconds" Category="Basic" Description="Periodic (seconds)" Type="Interval" ReadablePayload="Every %intervalSeconds% seconds">
  <AgentParameters>
    <Parameter Name="IntervalSeconds" Value="%intervalSeconds%" />
  </AgentParameters>
  <UserParameterJson><![CDATA[[{"Name":"IntervalSeconds","Pattern":"%intervalSeconds%","DataType":"int","ControlType":"freeText","ControlMetadata":null,"Placeholder":"number of seconds","DefaultValue":"3600",
"Validation":{"Regex":"[0-9]{1,6}","MaxLength":"6","AllowedValues":null,"NumValueRestrictions":null},"Value":null,"HintText":null,"Source":null}]]]></UserParameterJson>
</TriggerTemplate>

Platforms

  • All platforms

Notes

The Tachyon Agent does not persist the last time the Interval trigger was fired across a restart; if the Agent is restarted, the timer associated with the interval trigger is reset back to its initial time.

Warning

Take care when scheduling rules to be evaluated - scheduling a rule to evaluate too frequently can adversely affect endpoint performance.

In general, scheduling a rule to be evaluated more frequently than a few minutes should be avoided.

Where possible, use an event-based trigger (such as Event Log or Registry change) in preference to an interval-based one.