https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660253#M17581 <P>Looking at it as every 3 hours from 7am to 10pm gets you <FONT face="courier new,courier">* 7-21/3 * * *</FONT>.&nbsp; Change the first asterisk to a number (0-59) if you want the schedule to be once each hour rather than every minute.</P> Tue, 10 Oct 2023 15:56:48 GMT richgalloway 2023-10-10T15:56:48Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660250#M17580 <P>How to write a cron schedule for</P> <P>every 3 hours exclude from 10pm to 7 am&nbsp;</P> Tue, 10 Oct 2023 16:00:32 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660250#M17580 vishwa 2023-10-10T16:00:32Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660253#M17581 <P>Looking at it as every 3 hours from 7am to 10pm gets you <FONT face="courier new,courier">* 7-21/3 * * *</FONT>.&nbsp; Change the first asterisk to a number (0-59) if you want the schedule to be once each hour rather than every minute.</P> Tue, 10 Oct 2023 15:56:48 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660253#M17581 richgalloway 2023-10-10T15:56:48Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660658#M17633 <P>Hi <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957">@richgalloway</a>&nbsp;</P><P>My ask was&nbsp;</P><P><SPAN>Corn schedule: every 3 hours exclude from 10pm to 7 am&nbsp;</SPAN></P><P><SPAN>We don't want to receive alert from 10 pm to 7 am</SPAN></P> Fri, 13 Oct 2023 12:24:46 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660658#M17633 vishwa 2023-10-13T12:24:46Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660666#M17634 <P>Excluding 2200-0700 is the same as including 0700-2159, which is what the cron schedule I offered does.</P> Fri, 13 Oct 2023 12:56:43 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-write-a-cron-schedule-for-every-3-hours-from-7am-to-10pm/m-p/660666#M17634 richgalloway 2023-10-13T12:56:43Z