Reporting

cron expression scheduled report

numeroinconnu12
Path Finder

Hello everyone, 
thanks for your helping.

How to use the CRON SCHEDULE to schedule a splunk report once a quarter but on the first day of the month.

For example for January, February, March, the report will be scheduled for January 1st.
For March, April, May, the report will be scheduled for March 1st
....

Labels (1)
Tags (1)
0 Karma
1 Solution

inventsekar
SplunkTrust
SplunkTrust

For reference of the new learners of crontab,... 

Minute ---- hour ------ day of month(1-31) ---- month(1-12) ---- day of week(0-6)

0      0      1      1,4,7,10           *
min----hr----day--- Jan,Apr,Jul,Oct---anydayOftheWeek

 

 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

numeroinconnu12
Path Finder

Thanks @ITWhisperer

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...