Alerting

Report cron schedule not running correctly anymore

swangertyler
Path Finder

I had a report that would run on the first Thursday of every month. It had been working for months. Recently, it startign running more than I expected based on how the cron was written, and the only thing I can attribute it to at the moment is that we upgraded to 7.3.4 from 6.1.1(I think).

The cron is: 0 4 1-8 * 4

What it is doing now is running every day from the 1st to the 8th of every month, and running every Thursday at 4 am.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

According to https://crontab.guru the report is running exactly when you said it should.
Either the old behavior was a bug this now fixed or the cron "standard" has changed since 6.1.1.
If there is no mention of this change in any of the release notes since 6.1.2 then you should file a bug report. Otherwise, submit an enhancement request at https://ideas.splunk.com.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...