topic Re: Cron Expression- Special Characters/Wildcards in Alerting

Cron Expression- Special Characters/Wildcards

lisatse — Tue, 09 Jun 2020 16:55:20 GMT

I am fairly new to Splunk Enterprise and I read the documentation about writing cron expressions. Does Splunk support special characters when you are writing cron expressions?

Example of special characters: * , - ? L W

Example cron syntax: 0 */2 * ? * *

Re: Cron Expression- Special Characters/Wildcards

to4kawa — Wed, 27 May 2020 09:36:19 GMT

https://docs.splunk.com/Documentation/Splunk/latest/Alert/CronExpressions
https://en.wikipedia.org/wiki/Cron#CRON_expression

yes , you can use these characters without L W C

But I've never tried it, so please give it a try and let me know how you do it.

Re: Cron Expression- Special Characters/Wildcards

PavelP — Wed, 27 May 2020 11:16:41 GMT

I've just tested - splunk cron doesn't accept any special cron characters, except listed on the doc page (*,-/)