topic CRON expression in Alerting https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580559#M13363 <P>How would I configure a CRON expression such that an alert was sent 50 minutes past every hour, but only between 7:50am (0750) to 4:50pm (1650) Monday to Friday? And if possible, excluding bank holidays. Thanks.</P> Tue, 11 Jan 2022 08:48:57 GMT C14795A 2022-01-11T08:48:57Z CRON expression https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580559#M13363 <P>How would I configure a CRON expression such that an alert was sent 50 minutes past every hour, but only between 7:50am (0750) to 4:50pm (1650) Monday to Friday? And if possible, excluding bank holidays. Thanks.</P> Tue, 11 Jan 2022 08:48:57 GMT https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580559#M13363 C14795A 2022-01-11T08:48:57Z Re: CRON expression https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580560#M13364 <LI-CODE lang="markup">50 7-16 * * 1-5</LI-CODE><P>cron doesn't know about public holidays</P> Tue, 11 Jan 2022 08:58:33 GMT https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580560#M13364 ITWhisperer 2022-01-11T08:58:33Z Re: CRON expression https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580561#M13365 <P>Many thanks for the quick response - much appreciated</P> Tue, 11 Jan 2022 09:02:40 GMT https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580561#M13365 C14795A 2022-01-11T09:02:40Z Re: CRON expression https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580562#M13366 <P>You could try the holidays app from splunkbase to test if the day is a holiday in your alert search</P> Tue, 11 Jan 2022 09:05:23 GMT https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580562#M13366 ITWhisperer 2022-01-11T09:05:23Z Re: CRON expression https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580563#M13367 <P>Will try that - thanks again.</P> Tue, 11 Jan 2022 09:08:08 GMT https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580563#M13367 C14795A 2022-01-11T09:08:08Z Re: CRON expression https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580575#M13368 Another option is create lookup file where you add those days which you want to exclude and add check from it to your query. If days match you can add something to your SPL to prevent it to give any results. Tue, 11 Jan 2022 10:40:38 GMT https://community.splunk.com/t5/Alerting/CRON-expression/m-p/580575#M13368 isoutamo 2022-01-11T10:40:38Z