All Apps and Add-ons

How to schedule a report to run every second business day of the month?

bennybunny09
New Member

I want to run an alert report run every second business day of the month?

0 Karma

woodcock
Esteemed Legend

Use a cron of * 10 2-7 * 1-5 but also add logic to your SPL to short-circuit your search so that on those days that aren't the 2nd business day don't run. See my unaccepted answer here:

https://answers.splunk.com/answers/172541/is-it-possible-to-purposely-cause-a-scheduled-sear.html

0 Karma

bennybunny09
New Member

I want it to run every 2nd business day of every month at 2:00 PM. It should exclude weekends, holidays..

0 Karma

woodcock
Esteemed Legend

Did you even bother to read the answer? It is a flexible answer that when tuned will do exactly what you need it to do. Ignore the OP subject and look at the answer.

0 Karma

impurush
Contributor

Hi @bennybunny09 Please use the below cron expression to schedule your alert.

* 10 2-7 * 1-5

Every 2nd business day of the month @10 AM will run the alert/report.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...