https://community.splunk.com/t5/Alerting/Alert-To-Email-Cron-Job-9-AM-to-Now/m-p/531757#M10011 <P>Add <FONT face="courier new,courier">earliest=@d+9h</FONT> to the query (before the first pipe).</P> Wed, 02 Dec 2020 19:19:41 GMT richgalloway 2020-12-02T19:19:41Z https://community.splunk.com/t5/Alerting/Alert-To-Email-Cron-Job-9-AM-to-Now/m-p/531749#M10010 <P>I am running a search with a corn expression "0 10-18/2 * * *". This translates to "<I><SPAN>At</SPAN><SPAN>&nbsp;</SPAN><SPAN class="">minute 0</SPAN><SPAN>&nbsp;</SPAN><SPAN class="">past every 2nd hour from 10 through 18</SPAN><SPAN>.</SPAN>”</I></P><P>I want to run this job every time with "9 AM to Now", and there isn't an option under "Time Range". I would appreciate if someone can help me achieve this.</P> Wed, 02 Dec 2020 18:21:33 GMT https://community.splunk.com/t5/Alerting/Alert-To-Email-Cron-Job-9-AM-to-Now/m-p/531749#M10010 geekf 2020-12-02T18:21:33Z https://community.splunk.com/t5/Alerting/Alert-To-Email-Cron-Job-9-AM-to-Now/m-p/531757#M10011 <P>Add <FONT face="courier new,courier">earliest=@d+9h</FONT> to the query (before the first pipe).</P> Wed, 02 Dec 2020 19:19:41 GMT https://community.splunk.com/t5/Alerting/Alert-To-Email-Cron-Job-9-AM-to-Now/m-p/531757#M10011 richgalloway 2020-12-02T19:19:41Z