The following cron expression does not work in the input setting of Splunk DB connect App (v3.1.4) on Splunk server (v7.3.0).
0 * 1-25 * 0
And it is shown the message;
"invalid interval, must be an integer or cron expression."
I have already checked the expression in the site;
Also it is weird for the expression to work in alert setting.
I would like to run the input setting at minute 0 on every day-of-month from 1 through 25 and on Sunday.
I appreciate any advice and idea to let the schedule work in DB connect.
0 * 1-25 * *
This cron expression works in the app!
But this is now what I want to do.