All Apps and Add-ons

How to trigger a scheduled report for every Sunday AND every first day of the month?

Chamrong
Explorer

I am using Splunk DB Connect v2. I would like to write cron job to run every Sunday AND every first day of the month.

The job is running on every Sunday (whatever day of the month)
the job is running every 1st day of the month (any day of the week)

0 Karma

Deepz2612
Explorer

Hello,
I have onboarded the database data in db connect and while setting up the report the column with timestamp are not of desired format.
Can you help me with some ideas on how to get the output in desired format..
for eg.for the column Sys_entry_timestamp has the value 09-10-2017 00:09:45:6000 AM but i need it as 10 Sep 2017 00:09:45 AM.

0 Karma

Deepz2612
Explorer

I wanted to run a report on every first Business day of the month.
i.e., If the first business day of the month falls on Monday-Friday I want the report to run
and if it falls on Saturday/sunday I want the report to report on the next business day.

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

There is no cron scheduling ability to perform that particular schedule. If it had some kind of optional functionality, it could be possible, but that level of complexity is not available.

0 Karma

Deepz2612
Explorer

Thanks for your reply

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

According to CrontabGuru, you will want to use:

10 8 1 * 0
0 Karma

cmerriman
Super Champion

maybe something like this:

10 8 *,1 * 1,*

where 10 is the minute and 8 is the hour of the day.

0 Karma

Chamrong
Explorer

I am using dbconnect2

0 Karma

cmerriman
Super Champion

I have DBConnect V3 and that cron didn't error out, so I'm not sure if something changed from V2 to V3. I'm not sure if that cron will work exactly as you want, but I think it would do the job, but if you can't get it to work in V2, it's moot anyways 😞

0 Karma

Chamrong
Explorer

dbconnect do not recognise and provide error : Enter seconds or a valid cron string

0 Karma

cmerriman
Super Champion

hmm, I tested the cron string in 'report' and it worked. i'll noodle a bit more.

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...