Alerting

Alert Cron for weekly TUES & THURS

tmarlette
Motivator

I am trying to write a cron expression to trigger a report two time a week.
once on Tuesday at midnight
once on Thursday at midnight.

Attempting to write standard cron, I came up with this 0 0 0 0 ? * TUE,THU though it Splunk says 'invalid cron'.

I was wondering if anyone knew of a way to make this schedule so that Splunk can save it as a scheduled alert, or maybe correct me where I went wrong?

Thank you guys!!

Tags (2)
0 Karma
1 Solution

somesoni2
Revered Legend

Here you go.

0 0 * * 2,4

Reference: http://crontab.guru/

View solution in original post

0 Karma

somesoni2
Revered Legend

Here you go.

0 0 * * 2,4

Reference: http://crontab.guru/

0 Karma

tmarlette
Motivator

worked like a charm, thank you sir!

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...