I need a cron expression that would run a report on first two mondays of every month.What would be the expression?Thanks in advance
Not sure how flexible the cron syntax is within Splunk so mabe you could try with:
0 8 1-14 * 1
Which reads as: At 08:00 on every day-of-month from 1 through 14 that is also a Monday.
What's your actual requirement?
You can make any changes you like, syntax is as follows:
* * * * * - - - - - | | | | | | | | | +----- day of week (0 - 6) (Sunday=0) | | | +------- month (1 - 12) | | +--------- day of month (1 - 31) | +----------- hour (0 - 23) +------------- min (0 - 59)
No worries. Please don't forget to confirm the answer once you have verified it fully works for you.
I'm still not 100% sure anymore given what ckrishnaguturi mentioned above so you are going to have to test and let us know.
You might be right. Don't have my lab to test this but I'm finding contradictory answers online:
See for instance:
I don't have my lab to test this at the moment sorry