Alerting

Cron expression for Scheduled Alert from 6pm to 6am for every 15mints & Sunday to Thursday.

vvemula
Path Finder

Hi Ninja's,

 

I have created the alert with the cron expression for Scheduled Alert from 6pm to 6am for every 15mints & Sunday to Thursday.

Cron Expression: */15 18-6 **7-4 

But I am getting the error in Cron Expression. I have written similar one (*/15 1-13 **7-4 ) which is working as expected. Can someone please help me with the expression. Thank you.

Labels (2)
Tags (3)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @vvemula,

Please try below;

*/15 6-18 * * 4-7
If this reply helps you an upvote and "Accept as Solution" is appreciated.
0 Karma

vvemula
Path Finder

Hi Thanks for the Reply,

 

I actually need from 6pm to 6am. The corn expression worked for me is this(*/15 18-23,00-06 * * 0-4). Thank you.

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...