Hi, @mvonal, This answer is wrong. In fact, if you go to https://crontab.guru/#0_5_*_*_7, it says "Non standard! May not work with every cron." From the Splunk documentation: https://docs.splunk.com/Documentation/Splunk/7.2.4/Alert/CronExpressions Your cron schedule for sunday, has to be like this: 0 5 * * 0 if you put a 7 on the day, splunk will go crazy, and it will repeat the alert in an infinite loop. I tell you this because I have just had this exact same problem. Sunday is 0 on the cron schedule ... View more