Alerting

Cron Expression

anuj1630
New Member

Hi,
I want a cron expression for executing a query every day @ 12:45PM. The cron expression I used is : 0 45 12 * * ?. But I am getting an error stating "invalid interval, must be an integer or cron expression". Please help.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Cron strings are minute hour date month day so your example was telling Splunk to run the query at 45:00 on the 12th of every month. Try 45 12 * * *.

---
If this reply helps you, Karma would be appreciated.

hardikJsheth
Motivator

In addition to answer provided by @richgalloway, the cron schedule can't have more than five characters. For getting correct cron https://crontab.guru/ is good site.

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

Weird Windoze does a 6th field, which does seconds. I suspect that is the source of the incorrect cron in the question. Go with Rich's answer.

0 Karma
Get Updates on the Splunk Community!

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...