A time-based scheduling syntax used to define when scheduled searches and scheduled reports execute in LogScale. Cron expressions consist of five fields representing minute, hour, day of month, month, and day of week, using special characters like asterisks for wildcards, commas for lists, hyphens for ranges, and slashes for step values. LogScale extends standard cron syntax with the 'H' character, which automatically distributes execution times to balance system load by selecting a fixed but randomized minute based on a hash of the scheduled operation's ID.