Reporting

cron expression scheduled report

numeroinconnu12
Path Finder

Hello everyone, 
thanks for your helping.

How to use the CRON SCHEDULE to schedule a splunk report once a quarter but on the first day of the month.

For example for January, February, March, the report will be scheduled for January 1st.
For March, April, May, the report will be scheduled for March 1st
....

Labels (1)
Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma

inventsekar
Super Champion

For reference of the new learners of crontab,... 

Minute ---- hour ------ day of month(1-31) ---- month(1-12) ---- day of week(0-6)

0      0      1      1,4,7,10           *
min----hr----day--- Jan,Apr,Jul,Oct---anydayOftheWeek

 

 

0 Karma

numeroinconnu12
Path Finder

Thanks @ITWhisperer

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!