Splunk Enterprise

How to write cron to run search every 15 minutes always between 7h and 19h?

jip31
Motivator

hello

I use the cron below in order to run the search At minute 10 past every hour from 7 through 19.

 

10 7-19 * * *

 

 Instead doing this, I would like to run the search every 15 minutes always between 7h and 19h 

could you help please?

 

Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

This is not possible in a single cron if you want to include 19:00 but not 19:15, 19:30 and 19:45

To exclude 19:00 (and run that as a separate job), use this

*/15 7-18 * * *

 

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This is not possible in a single cron if you want to include 19:00 but not 19:15, 19:30 and 19:45

To exclude 19:00 (and run that as a separate job), use this

*/15 7-18 * * *

 

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...