Deployment Architecture

How to schedule a search biweekly (week over week) on monday in splunk?

sameera123
Explorer

How to schedule a search biweekly (week over week) on monday in splunk?

I was unable to get the proper cron entry for this, can anyone help me out?

0 Karma
1 Solution

woodcock
Esteemed Legend

If you are asking how to run a search every other week, then check out this Q&A:

http://answers.splunk.com/answers/261163/is-there-a-way-i-can-schedule-a-saved-search-to-ru.html

P.S. @ppablo_splunk, maybe you will accept my (tested) correct answer in the referenced link?

View solution in original post

woodcock
Esteemed Legend

If you are asking how to run a search every other week, then check out this Q&A:

http://answers.splunk.com/answers/261163/is-there-a-way-i-can-schedule-a-saved-search-to-ru.html

P.S. @ppablo_splunk, maybe you will accept my (tested) correct answer in the referenced link?

sameera123
Explorer

got it thanks !!!

0 Karma

sameera123
Explorer

This looks good, but I'm calling a lookup using |inputlookup not regular search query.

for example my search starts like below.

|inputlookup lookup1.csv .....

0 Karma

woodcock
Esteemed Legend

No problem, ... | map search="| inputlookup lookup1.csv ... is valid syntax.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...