cron job not working

[logloganathan]

i want to setup a alert for every hour in splunk but not at 2 am.
i used below cron expression but it not work

0 0 1 3 4 5 6 7 8 9 10 12 13 14 15 16 17 18 19 20 21 22 23 * * *

it produces a error while saving so it used expression like

0 0-1 * * *

then i created another alert and provide expression like

0 3-23 * * *

is there any other way ? please suggest.

[kthammireddygar]

I am able to Schedule with this cron job 0 0,1,3-23 * * * in Splunk Version 6.6.4.
Can you please provide a screenshot of the error (red mark at cron expression)?

[logloganathan]

Thanks for your valuable response!!

[p_gurav]

Can you try :

0 0-1,3-23 * * *

[logloganathan]

its not working...same result...again not able to save

[p_gurav]

Is there any error any getting?

[logloganathan]

thanks for your valuable response

[damien_chillet · Accepted solution]

Try 0 0,1,3-23 * * *

[logloganathan]

its not working..not able to save

[damien_chillet]

I managed to schedule a search with with that cron on my instance...
Can you provide the error message?

[logloganathan]

i am not able to save the alert itself

[damien_chillet]

That is strange, are you sure the cron expression is the issue?
It could be another parameter wrongly set?
Can you share a screenshot of it maybe?

[logloganathan]

i am not able to save the file. it telling red mark at Cron expression i entered.

[damien_chillet]

Sorry to hear that...
I'm surprised we cannot get it to work.
Which version of Splunk are you running?

[logloganathan]

its working...the mistake i did not entered the commas

so i put 0 0-1,3-23 * * * as you say earlier