https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71526#M1627 <P>How can one make a cron schedule in Splunk run just in specific year? This can be easily done in 8-digit type of cron schedules but splunk uses just 5 digits.</P> <P>The case is that I need to backfill summary index only for several months of current year, but our statistics has these months in 2012 and 2011 years so setting schedule like <CODE>0 0 * 7-9 *</CODE> will index data in both years that will be redundant and also will take twice more time and space.</P> <P>p.s. I can't set earliest time in search or limit time in other way as we need the search to count for all the time. </P> Wed, 26 Sep 2012 15:08:03 GMT iKate 2012-09-26T15:08:03Z https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71526#M1627 <P>How can one make a cron schedule in Splunk run just in specific year? This can be easily done in 8-digit type of cron schedules but splunk uses just 5 digits.</P> <P>The case is that I need to backfill summary index only for several months of current year, but our statistics has these months in 2012 and 2011 years so setting schedule like <CODE>0 0 * 7-9 *</CODE> will index data in both years that will be redundant and also will take twice more time and space.</P> <P>p.s. I can't set earliest time in search or limit time in other way as we need the search to count for all the time. </P> Wed, 26 Sep 2012 15:08:03 GMT https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71526#M1627 iKate 2012-09-26T15:08:03Z https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71527#M1628 <P>I didn't think you can specify retroactive cron schedules. Cron schedules dictate when jobs will run in the future. </P> <P>Did you look at backfill script ($SPLUNK_HOME/bin/fill_summary_index.py)?</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Knowledge/Managesummaryindexgapsandoverlaps" target="_blank">Manage summary index gaps and overlaps</A></P> Mon, 28 Sep 2020 12:30:43 GMT https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71527#M1628 reed_kelly 2020-09-28T12:30:43Z https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71528#M1629 <P>Yes, I am using this script. And it's exactly about running and writing to summary index your searches, like they were launched in the past with periodicity set in the (cron)schedule.</P> Wed, 26 Sep 2012 22:05:45 GMT https://community.splunk.com/t5/Reporting/using-of-year-in-cron-schedule/m-p/71528#M1629 iKate 2012-09-26T22:05:45Z