topic Re: Proper Syntax - Cron Job Expression Every Hour at 15 Mins Past The Hour in Alerting

Proper Syntax - Cron Job Expression Every Hour at 15 Mins Past The Hour

SplunkLunk — Thu, 09 Nov 2017 19:54:26 GMT

Greetings,

Trying to create a scheduled alert in Splunk using "Run on Cron Schedule". If I want to run a cron job every 60 minutes at 15 minutes past the hour, what would the proper syntax be in Splunk? Thanks.

Re: Proper Syntax - Cron Job Expression Every Hour at 15 Mins Past The Hour

elliotproebstel — Thu, 09 Nov 2017 20:09:08 GMT

The syntax you need for that is:
15 * * * *

I find this page useful:
https://www.computerhope.com/unix/ucrontab.htm

Re: Proper Syntax - Cron Job Expression Every Hour at 15 Mins Past The Hour

SplunkLunk — Thu, 09 Nov 2017 20:12:00 GMT

Well, that was easy. Thanks.

Re: Proper Syntax - Cron Job Expression Every Hour at 15 Mins Past The Hour

elliotproebstel — Thu, 09 Nov 2017 20:16:07 GMT

Happy to help! 🙂