Alerting

Need help for Cron schedule

pratap924
New Member

Can you please help me to write the Cron schedule for the below format:

Need to schedule alert for every 2 mins after 10th min (1, 12, 22, 32 ..) interval.

Thanks in advance.

Tags (1)
0 Karma
1 Solution

kristian_kolb
Ultra Champion

This would do what you (say you) like

1,12,22,32,42,52 * * * *

it can also be written

2-52/10 * * * *

But perhaps the first "1" should be a "2" to be consistent?

More info and an online calculator here:

http://www.dataphyx.com/cronsandbox/cronsandboxgui.php

/K

View solution in original post

kristian_kolb
Ultra Champion

eer, well. you're right linu1988. The text and the example don't add up.

Every 2 mins after the 10th (what the text says) is;

12-59/2 * * * *

i.e. 12, 14, 16, 18 ... 58

However, see below for the schedule according to the supplied sample intervals.

/k

0 Karma

kristian_kolb
Ultra Champion

This would do what you (say you) like

1,12,22,32,42,52 * * * *

it can also be written

2-52/10 * * * *

But perhaps the first "1" should be a "2" to be consistent?

More info and an online calculator here:

http://www.dataphyx.com/cronsandbox/cronsandboxgui.php

/K

linu1988
Champion

Yes, this should be done not 1 then 12. This is the best answer for your question.

0 Karma

pratap924
New Member

Thank you so much for the quick turn around on this request. Really Appreciate.
This cron expression is working 🙂

0 Karma

linu1988
Champion

not possible , you don't have a series proper sequence

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...