Splunk Enterprise

cron schedule

mahesh27
Communicator

I have to set up an alert with corn schedule from 9pm to 7am.
when i tried to get it from crontab it was not coming.

how can i create the corn schedule  for this timings.

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Cron allows multiple ranges so you can specify 12-7am and 9-12pm.

* 0-7,21-23 * * *
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Cron allows multiple ranges so you can specify 12-7am and 9-12pm.

* 0-7,21-23 * * *
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...