Alerting

How to cron schedule for a specific time range?

marellasunil
Communicator

How do I schedule a search to run every Friday morning at 11 am until Sunday morning at 9 am using a cron job?

Labels (2)
Tags (2)
0 Karma
1 Solution

lukejadamec
Super Champion

The third position is day of the week, with 0 = Sunday.

So if you want to run something every Friday it would be 5.

The second position is hour.

* 11 5 * *

Will run every Friday at 11.

Schedule the search time frame to look back to Sunday at 9, eariest=-122h@m latest=now.

View solution in original post

0 Karma

andreaswpv
Explorer

if it is this: minute | hour | Day of month | Month| Day of week
then it should be
full hour | 11 hours | any day of the month | any month | 5 day of the week (0=Sunday)

  • 11 * * 5
0 Karma

andreaswpv
Explorer

so, this post is swallowing some characters when being published, as it actually had 5 positions in the cron .
Let's try again (this time correct):

Zero eleven asterix asterix five

0 11 * * 5

0 Karma

prakashbhanu407
New Member

minute | hour | Day of month | Month| Day of week

then it should be * 11 * * 5 for Every Friday at 11

0 Karma

marellasunil
Communicator

Yes, starting from Friday 11am till Sunday 9am every 5 mins.
actually splunk alert schdule

0 Karma

timmalos
Communicator

Question is how often you want this search to be run in your timerange (Friday 11am --> Sunday 9am)

0 Karma

lukejadamec
Super Champion

The third position is day of the week, with 0 = Sunday.

So if you want to run something every Friday it would be 5.

The second position is hour.

* 11 5 * *

Will run every Friday at 11.

Schedule the search time frame to look back to Sunday at 9, eariest=-122h@m latest=now.

0 Karma

marellasunil
Communicator

every week

0 Karma

jonuwz
Influencer

how often ?

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...