<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to write Cron Expression for a scheduled alert? in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449859#M7911</link>
    <description>&lt;P&gt;I want help writing a Cron Expression for a scheduled alert to start my search query at 2:45 AM for every 10 mins till 5:55 AM.&lt;/P&gt;

&lt;P&gt;My Cron would run like first at 2:45,2:55,3:05,3:15.....5:55.&lt;/P&gt;

&lt;P&gt;Can anyone please help me?&lt;/P&gt;</description>
    <pubDate>Tue, 19 Mar 2019 19:54:03 GMT</pubDate>
    <dc:creator>gpunjabi</dc:creator>
    <dc:date>2019-03-19T19:54:03Z</dc:date>
    <item>
      <title>How to write Cron Expression for a scheduled alert?</title>
      <link>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449859#M7911</link>
      <description>&lt;P&gt;I want help writing a Cron Expression for a scheduled alert to start my search query at 2:45 AM for every 10 mins till 5:55 AM.&lt;/P&gt;

&lt;P&gt;My Cron would run like first at 2:45,2:55,3:05,3:15.....5:55.&lt;/P&gt;

&lt;P&gt;Can anyone please help me?&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 19:54:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449859#M7911</guid>
      <dc:creator>gpunjabi</dc:creator>
      <dc:date>2019-03-19T19:54:03Z</dc:date>
    </item>
    <item>
      <title>Re: How to write Cron Expression for a scheduled alert?</title>
      <link>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449860#M7912</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;As far as I know you can't achieve this with single cron but you can schedule same search twice with 2 different cron.&lt;/P&gt;

&lt;P&gt;First cron &lt;CODE&gt;45-59/10 2 * * *&lt;/CODE&gt;, this cron executes at 02:45 and 02:55&lt;/P&gt;

&lt;P&gt;Second cron &lt;CODE&gt;5-59/10 3-5 * * *&lt;/CODE&gt; , this cron executes from 03:05, 03:15 to 05:55&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 20:41:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449860#M7912</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2019-03-19T20:41:07Z</dc:date>
    </item>
    <item>
      <title>Re: How to write Cron Expression for a scheduled alert?</title>
      <link>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449861#M7913</link>
      <description>&lt;P&gt;Thanks Harshmarvania &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 22 Mar 2019 19:19:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449861#M7913</guid>
      <dc:creator>gpunjabi</dc:creator>
      <dc:date>2019-03-22T19:19:42Z</dc:date>
    </item>
    <item>
      <title>Re: How to write Cron Expression for a scheduled alert?</title>
      <link>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449862#M7914</link>
      <description>&lt;P&gt;Welcome @gpunjabi &lt;/P&gt;</description>
      <pubDate>Fri, 22 Mar 2019 19:22:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449862#M7914</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2019-03-22T19:22:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to write Cron Expression for a scheduled alert?</title>
      <link>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449863#M7915</link>
      <description>&lt;P&gt;i want give schedule alert for last day of ever month, can we please help me how to write cron expression for this or else any other way to do  &lt;/P&gt;</description>
      <pubDate>Wed, 12 Jun 2019 06:10:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-to-write-Cron-Expression-for-a-scheduled-alert/m-p/449863#M7915</guid>
      <dc:creator>nainanayana</dc:creator>
      <dc:date>2019-06-12T06:10:54Z</dc:date>
    </item>
  </channel>
</rss>

