Reporting

cron expression scheduled report

numeroinconnu12
Path Finder

Hello everyone, 
thanks for your helping.

How to use the CRON SCHEDULE to schedule a splunk report once a quarter but on the first day of the month.

For example for January, February, March, the report will be scheduled for January 1st.
For March, April, May, the report will be scheduled for March 1st
....

Labels (1)
Tags (1)
0 Karma
1 Solution

inventsekar
SplunkTrust
SplunkTrust

For reference of the new learners of crontab,... 

Minute ---- hour ------ day of month(1-31) ---- month(1-12) ---- day of week(0-6)

0      0      1      1,4,7,10           *
min----hr----day--- Jan,Apr,Jul,Oct---anydayOftheWeek

 

 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

numeroinconnu12
Path Finder

Thanks @ITWhisperer

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...

Access to Splunk Observability Kubernetes “Classic Navigator” UI will no longer be available starting January ...

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...