Alerting

what format should cron be when setting up a schedule

HattrickNZ
Motivator

sorry forthis simplistic question I just can't work it out from the instructions.

here I want to set up a cron job to run every day at 3:03 a.m.

when seeting up a cron job(see pic beow) what format should the paramter be in in the input box below in the pic:
1 - no quotes
03 3 * * *
2 - single quotes
'03 3 * * *'
3 - other single quotes forget the name
03 3 * * *

alt text

Tags (3)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi HattrickNZ,

well, have you tried to use ' or " in the cron field?
If you do so, you will get this error:

Encountered the following error while trying to save: In handler 'savedsearch': Invalid cron_schedule="'* 5 * * *'"

So, the answer is: No quotes of any kind are needed in the cron entry field.

cheers, MuS

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi HattrickNZ,

well, have you tried to use ' or " in the cron field?
If you do so, you will get this error:

Encountered the following error while trying to save: In handler 'savedsearch': Invalid cron_schedule="'* 5 * * *'"

So, the answer is: No quotes of any kind are needed in the cron entry field.

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...