Alerting

Cron Schedule Not Working..

dilipbailwal
Path Finder

i have scheduled data collection at following interval.

> interval = 0 1 * * 1

and i see on Saturday it starts job with ingesting data every min.
later i tried following and did not work..

> interval = * 1 * * 1

can some one guide the right cron schedule for - 1am on every Monday - Should be executed only ONCE.

Thanks

Tags (2)
0 Karma

stephanefotso
Motivator

Hello! your first expression 0 1 * * 1, means exactly, 1am on every Monday. Now make sure that the execution schedule is matching the search time range. That is to avoid overlaps or gaps,

SGF
0 Karma

richgalloway
SplunkTrust
SplunkTrust

0 1 * * 1 should do it.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...