Reporting

cron expression scheduled report

numeroinconnu12
Path Finder

Hello everyone, 
thanks for your helping.

How to use the CRON SCHEDULE to schedule a splunk report once a quarter but on the first day of the month.

For example for January, February, March, the report will be scheduled for January 1st.
For March, April, May, the report will be scheduled for March 1st
....

Labels (1)
Tags (1)
0 Karma
1 Solution

inventsekar
SplunkTrust
SplunkTrust

For reference of the new learners of crontab,... 

Minute ---- hour ------ day of month(1-31) ---- month(1-12) ---- day of week(0-6)

0      0      1      1,4,7,10           *
min----hr----day--- Jan,Apr,Jul,Oct---anydayOftheWeek

 

 

0 Karma

numeroinconnu12
Path Finder

Thanks @ITWhisperer

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...