Splunk Enterprise

How to write cron to run search every 15 minutes always between 7h and 19h?

jip31
Motivator

hello

I use the cron below in order to run the search At minute 10 past every hour from 7 through 19.

 

10 7-19 * * *

 

 Instead doing this, I would like to run the search every 15 minutes always between 7h and 19h 

could you help please?

 

Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

This is not possible in a single cron if you want to include 19:00 but not 19:15, 19:30 and 19:45

To exclude 19:00 (and run that as a separate job), use this

*/15 7-18 * * *

 

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This is not possible in a single cron if you want to include 19:00 but not 19:15, 19:30 and 19:45

To exclude 19:00 (and run that as a separate job), use this

*/15 7-18 * * *

 

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...