Proper Syntax - Cron Job Expression Every Hour at 15 Mins Past The Hour

[SplunkLunk]

Greetings,

Trying to create a scheduled alert in Splunk using "Run on Cron Schedule". If I want to run a cron job every 60 minutes at 15 minutes past the hour, what would the proper syntax be in Splunk? Thanks.

[elliotproebstel · Accepted solution]

The syntax you need for that is:
15 * * * *

I find this page useful:
https://www.computerhope.com/unix/ucrontab.htm

[SplunkLunk]

Well, that was easy. Thanks.

[elliotproebstel]

Happy to help! 🙂