topic Cron Expression in Alerting

Cron Expression

anuj1630 — Fri, 04 Aug 2017 08:35:54 GMT

Hi,
I want a cron expression for executing a query every day @ 12:45PM. The cron expression I used is : 0 45 12 * * ?. But I am getting an error stating "invalid interval, must be an integer or cron expression". Please help.

Re: Cron Expression

richgalloway — Fri, 04 Aug 2017 12:52:53 GMT

Cron strings are minute hour date month day so your example was telling Splunk to run the query at 45:00 on the 12th of every month. Try 45 12 * * *.

Re: Cron Expression

hardikJsheth — Fri, 04 Aug 2017 13:45:08 GMT

In addition to answer provided by @richgalloway, the cron schedule can't have more than five characters. For getting correct cron https://crontab.guru/ is good site.

Re: Cron Expression

cpetterborg — Fri, 04 Aug 2017 16:39:49 GMT

Weird Windoze does a 6th field, which does seconds. I suspect that is the source of the incorrect cron in the question. Go with Rich's answer.