https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502108#M8946 <P>This is not working can you provide exact expression which is working in crontab related to my question.</P> Fri, 22 May 2020 11:18:27 GMT ajayabburi508 2020-05-22T11:18:27Z https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502106#M8944 <P>Hi Splunkers,</P> <P>We need to schedule alert for Every month on 2nd Wednesday,Thursday and Friday on @11 am. I have tried with below Cron Expression but i didn't get exact results.</P> <P>Cron Expression: 0 11 8-14 * 3-4</P> <P>Please provide proper cron expression.</P> Tue, 09 Jun 2020 15:56:13 GMT https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502106#M8944 ajayabburi508 2020-06-09T15:56:13Z https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502107#M8945 <P>Hello @ajayabburi508 </P> <P>if you specify <STRONG>both</STRONG> days of month and days of week, they are combined with an "<STRONG>OR</STRONG>"</P> <P>Commands are executed by cron(8) when the 'minute', 'hour', and 'month of the year' fields match the current time, <STRONG>and</STRONG> at least one of the two 'day' fields ('day of month', or 'day of week') match the current time.</P> <P><CODE>0 11 * * 3-5</CODE> “At 11:00 on every day-of-week from Wednesday through Friday.” <A href="https://crontab.guru/#0_11_*_*_3-5">https://crontab.guru/#0_11_*_*_3-5</A></P> <P><CODE>0 11 8-14 * 3-5</CODE> “At 11:00 on every day-of-month from 8 through 14 <STRONG>and</STRONG> on every day-of-week from Wednesday through Friday.” <A href="https://crontab.guru/#0_11_8-14_*_3-5">https://crontab.guru/#0_11_8-14_*_3-5</A></P> <P>So you can use the first version <CODE>0 11 * * 3-5</CODE> and discard 12-14 results/month or <CODE>0 11 8-14 * *</CODE> and discard 4 results/month</P> Fri, 22 May 2020 11:06:35 GMT https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502107#M8945 PavelP 2020-05-22T11:06:35Z https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502108#M8946 <P>This is not working can you provide exact expression which is working in crontab related to my question.</P> Fri, 22 May 2020 11:18:27 GMT https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502108#M8946 ajayabburi508 2020-05-22T11:18:27Z https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502109#M8947 <P>@ajayabburi508 it seems it is not possible with one single expression, both provided expressions are partial workarounds but not the solution that you asked</P> Fri, 22 May 2020 13:11:16 GMT https://community.splunk.com/t5/Alerting/How-to-Write-Cron-expression-to-Schedule-alert-on-11am-Every/m-p/502109#M8947 PavelP 2020-05-22T13:11:16Z