Alerting

How to cron schedule for a specific time range?

marellasunil
Communicator

How do I schedule a search to run every Friday morning at 11 am until Sunday morning at 9 am using a cron job?

Labels (2)
Tags (2)
0 Karma
1 Solution

lukejadamec
Super Champion

The third position is day of the week, with 0 = Sunday.

So if you want to run something every Friday it would be 5.

The second position is hour.

* 11 5 * *

Will run every Friday at 11.

Schedule the search time frame to look back to Sunday at 9, eariest=-122h@m latest=now.

View solution in original post

0 Karma

andreaswpv
Explorer

if it is this: minute | hour | Day of month | Month| Day of week
then it should be
full hour | 11 hours | any day of the month | any month | 5 day of the week (0=Sunday)

  • 11 * * 5
0 Karma

andreaswpv
Explorer

so, this post is swallowing some characters when being published, as it actually had 5 positions in the cron .
Let's try again (this time correct):

Zero eleven asterix asterix five

0 11 * * 5

0 Karma

prakashbhanu407
New Member

minute | hour | Day of month | Month| Day of week

then it should be * 11 * * 5 for Every Friday at 11

0 Karma

marellasunil
Communicator

Yes, starting from Friday 11am till Sunday 9am every 5 mins.
actually splunk alert schdule

0 Karma

timmalos
Communicator

Question is how often you want this search to be run in your timerange (Friday 11am --> Sunday 9am)

0 Karma

lukejadamec
Super Champion

The third position is day of the week, with 0 = Sunday.

So if you want to run something every Friday it would be 5.

The second position is hour.

* 11 5 * *

Will run every Friday at 11.

Schedule the search time frame to look back to Sunday at 9, eariest=-122h@m latest=now.

0 Karma

marellasunil
Communicator

every week

0 Karma

jonuwz
Influencer

how often ?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...