Alerting

what format should cron be when setting up a schedule

HattrickNZ
Motivator

sorry forthis simplistic question I just can't work it out from the instructions.

here I want to set up a cron job to run every day at 3:03 a.m.

when seeting up a cron job(see pic beow) what format should the paramter be in in the input box below in the pic:
1 - no quotes
03 3 * * *
2 - single quotes
'03 3 * * *'
3 - other single quotes forget the name
03 3 * * *

alt text

Tags (3)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi HattrickNZ,

well, have you tried to use ' or " in the cron field?
If you do so, you will get this error:

Encountered the following error while trying to save: In handler 'savedsearch': Invalid cron_schedule="'* 5 * * *'"

So, the answer is: No quotes of any kind are needed in the cron entry field.

cheers, MuS

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi HattrickNZ,

well, have you tried to use ' or " in the cron field?
If you do so, you will get this error:

Encountered the following error while trying to save: In handler 'savedsearch': Invalid cron_schedule="'* 5 * * *'"

So, the answer is: No quotes of any kind are needed in the cron entry field.

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...