- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Cron expression for first two mondays of every mon...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cron expression for first two mondays of every month
I need a cron expression that would run a report on first two mondays of every month.What would be the expression?Thanks in advance
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Not sure how flexible the cron syntax is within Splunk so mabe you could try with:
0 8 1-14 * 1
Which reads as: At 08:00 on every day-of-month from 1 through 14 that is also a Monday.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks Javiergn but it's not the requirement I want.Canwe make any changes at the last number ie 1 which shows Monday?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What's your actual requirement?
You can make any changes you like, syntax is as follows:
* * * * *
- - - - -
| | | | |
| | | | +----- day of week (0 - 6) (Sunday=0)
| | | +------- month (1 - 12)
| | +--------- day of month (1 - 31)
| +----------- hour (0 - 23)
+------------- min (0 - 59)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You might be correct.I took 1-14 as dates not as day.Thanks.And sorry also my mistake
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No worries. Please don't forget to confirm the answer once you have verified it fully works for you.
I'm still not 100% sure anymore given what c_krishna_guturi mentioned above so you are going to have to test and let us know.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The expression will give the alerts at 08:00 on every day-of-month from 1 through 14 and on Monday
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You might be right. Don't have my lab to test this but I'm finding contradictory answers online:
See for instance:
VS
http://corntab.com/?c=0_8_1-14/7_*_1
I don't have my lab to test this at the moment sorry
Announcing Scheduled Export GA for Dashboard Studio
Extending Observability Content to Splunk Cloud
More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!
