I need a cron expression that would run a report on first two mondays of every month.What would be the expression?Thanks in advance
Not sure how flexible the cron syntax is within Splunk so mabe you could try with:
0 8 1-14 * 1
Which reads as: At 08:00 on every day-of-month from 1 through 14 that is also a Monday.
You might be right. Don't have my lab to test this but I'm finding contradictory answers online:
See for instance:
I don't have my lab to test this at the moment sorry
What's your actual requirement?
You can make any changes you like, syntax is as follows:
* * * * * - - - - - | | | | | | | | | +----- day of week (0 - 6) (Sunday=0) | | | +------- month (1 - 12) | | +--------- day of month (1 - 31) | +----------- hour (0 - 23) +------------- min (0 - 59)
No worries. Please don't forget to confirm the answer once you have verified it fully works for you.
I'm still not 100% sure anymore given what ckrishnaguturi mentioned above so you are going to have to test and let us know.