Splunk Enterprise

How to write cron to run search every 15 minutes always between 7h and 19h?

jip31
Motivator

hello

I use the cron below in order to run the search At minute 10 past every hour from 7 through 19.

 

10 7-19 * * *

 

 Instead doing this, I would like to run the search every 15 minutes always between 7h and 19h 

could you help please?

 

Labels (1)
Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

This is not possible in a single cron if you want to include 19:00 but not 19:15, 19:30 and 19:45

To exclude 19:00 (and run that as a separate job), use this

*/15 7-18 * * *

 

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This is not possible in a single cron if you want to include 19:00 but not 19:15, 19:30 and 19:45

To exclude 19:00 (and run that as a separate job), use this

*/15 7-18 * * *

 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...