How do I set up a Cron alert in Splunk? - Splunk Community

Alerting

I have a scheduled alert which get trigger every hour, but i don't want alert to get trigger at 2AM.
Please give me some suggetion.

Thank you in advance

Try this cron, (running for hour 0 to 1, skip 2 and then from hour 3 to 23).

0 0-1,3-23 * * *

Use a cron schedule instead of a basic schedule for the alert. For example, this runs the alert at the top of each hour from 0700-2300.

0 7-23 * * *

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...