Alerting

what format should cron be when setting up a schedule

HattrickNZ
Motivator

sorry forthis simplistic question I just can't work it out from the instructions.

here I want to set up a cron job to run every day at 3:03 a.m.

when seeting up a cron job(see pic beow) what format should the paramter be in in the input box below in the pic:
1 - no quotes
03 3 * * *
2 - single quotes
'03 3 * * *'
3 - other single quotes forget the name
03 3 * * *

alt text

Tags (3)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi HattrickNZ,

well, have you tried to use ' or " in the cron field?
If you do so, you will get this error:

Encountered the following error while trying to save: In handler 'savedsearch': Invalid cron_schedule="'* 5 * * *'"

So, the answer is: No quotes of any kind are needed in the cron entry field.

cheers, MuS

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi HattrickNZ,

well, have you tried to use ' or " in the cron field?
If you do so, you will get this error:

Encountered the following error while trying to save: In handler 'savedsearch': Invalid cron_schedule="'* 5 * * *'"

So, the answer is: No quotes of any kind are needed in the cron entry field.

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...