My PDF Server doesn´t run

albertoperez — Mon, 28 Sep 2020 09:47:40 GMT

Hi!
I´ve just installed the PDF Server app in my Splunk server (with all roles in the same server) and, after following the configuration steps that the documentation recommends, the test page for the PDF response ('status page' in Manager » System settings » Email alert settings) shows problems with the next description:
- PDF server is installed True
- PDF server is enabled True
- SMTP server set True
500 Internal Server Error
error: [Errno 104] Connection reset by peer

I have got a detailed debug obtained following the documentation indications, but I don´t detect what´s my problem.
Please, could you check it? The debug is at the bottom of this description.

Thank you very much.

COMPLETE DEBUG OUTPUT
Python Traceback

Traceback (most recent call last):
File "/opt/splunk/lib/python2.6/site-packages/cherrypy/cprequest.py", line 606, in respond
cherrypy.response.body = self.handler()
File "/opt/splunk/lib/python2.6/site-packages/cherrypy/_cpdispatch.py", line 25, in __call_
return self.callable(*self.args, **self.kwargs)
File "", line 1, in
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 38, in rundecs
return fn(*a, **kw)
File "", line 1, in
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 106, in check
return fn(self, *a, **kw)
File "", line 1, in
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 155, in validate_ip
return fn(self, *a, **kw)
File "", line 1, in
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 290, in preform_sso_check
return fn(self, *a, **kw)
File "", line 1, in
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 327, in check_login
return fn(self, *a, **kw)
File "", line 1, in
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/decorators.py", line 348, in handle_exceptions
return fn(self, *a, **kw)
File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/controllers/debug.py", line 417, in pdf_echo_loopback
serverResponse, serverContent = h.request(pdfServerUri, method='POST', body=urllib.urlencode(args))
File "/opt/splunk/lib/python2.6/site-packages/httplib2/init.py", line 1068, in request
(response, content) = self.request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
File "/opt/splunk/lib/python2.6/site-packages/httplib2/init.py", line 872, in _request
(response, content) = self._conn_request(conn, request_uri, method, body, headers)
File "/opt/splunk/lib/python2.6/site-packages/httplib2/init_.py", line 842, in _conn_request
response = conn.getresponse()
File "/opt/splunk/lib/python2.6/httplib.py", line 1000, in getresponse
response.begin()
File "/opt/splunk/lib/python2.6/httplib.py", line 391, in begin
version, status, reason = self._read_status()
File "/opt/splunk/lib/python2.6/httplib.py", line 349, in _read_status
line = self.fp.readline()
File "/opt/splunk/lib/python2.6/socket.py", line 397, in readline
data = recv(1)
error: [Errno 104] Connection reset by peer

Appserver configuration

DISPATCH_TIME_FORMAT: %s.%Q
SSOMode: permissive
_push_version: 0
build_number: 101277
caCertPath: etc/auth/splunkweb/cert.pem
cpu_arch: x86_64
docsCheckerBaseURL: https://quickdraw.splunk.com/help
enableSplunkWebSSL: 0
enable_autocomplete_login: False
enable_gzip: True
enable_insecure_login: False
enable_proxy_write: False
enabled_decomposers: plot
engine.autoreload_on: False
error_page.default:
etc_path: /opt/splunk/etc
flash_major_version: 9
flash_minor_version: 0
flash_revision_version: 124
guid: 74B1FD46-9A86-463C-AD88-39F3C3F7DE35
httpport: 8000
is_free_license: False
is_trial_license: False
is_version_initted: True
js_logger_mode: None
js_logger_mode_server_end_point: util/log/js
js_logger_mode_server_max_buffer: 100
js_logger_mode_server_poll_buffer: 1000
js_no_cache: False
license_state: OK
log.access_maxfiles: 5
log.access_maxsize: 25000000
log.error_maxfiles: 5
log.error_maxsize: 25000000
log.screen: True
login_content:

mako_cache_path: /opt/splunk/var/run/splunk/mako_cache
mgmtHostPort: 127.0.0.1:8089
minify_css: True
minify_js: True
module_dir: share/splunk/search_mrsparkle/modules
mrsparkle_path: /opt/splunk/share/search/mrsparkle
os_name: Linux
privKeyPath: etc/auth/splunkweb/privkey.pem
remoteUser: REMOTE_USER
request.show_tracebacks: True
response.timeout: 7200
root_endpoint: /
rss_endpoint: /rss
server.max_request_body_size: 524288000
server.socket_host: 0.0.0.0
server.socket_port: 8000
serviceFormPostURL: http://headlamp.splunk.com/event/add
site_packages_path: /opt/splunk/lib/python2.6/site-packages
splunkdTrustedIP: None
ssl_certificate_data:

start_time: 1312978127.82
startwebserver: 1
static_dir: share/splunk/search_mrsparkle/exposed
static_endpoint: /static
staticdir: /opt/splunk/share/splunk/search_mrsparkle/exposed
supportSSLV3Only: False
template_dir: share/splunk/search_mrsparkle/templates
testing_dir: share/splunk/testing
testing_endpoint: /testing
tools.decode.on: True
tools.encode.encoding: utf-8
tools.encode.on: True
tools.log_headers.on: True
tools.log_tracebacks.on: True
tools.sessions.name: session_id_8000
tools.sessions.on: True
tools.sessions.storage_path: /opt/splunk/var/run/splunk
tools.sessions.storage_type: file
tools.sessions.timeout: 60
tools.trailing_slash.on: True
trap_module_exceptions: True
ui_inactivity_timeout: 60
updateCheckerBaseURL: https://quickdraw.splunk.com/js/
use_future_expires: True
userRegistrationURL: https://www.splunk.com/index.php/pre_reg?destination=prod_reg
version_label: 4.2.2
version_number: 4.2.2

Client request headers

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Accept-Encoding: gzip,deflate
Accept-Language: es-es,es;q=0.8,en-us;q=0.5,en;q=0.3
Connection: keep-alive
Cookie: session_id_8000=2457161abd636d17cdb104a9e579050c797b9ff2
Host: 127.0.0.1:8000
Keep-Alive: 115
Referer: http://127.0.0.1:8000/en-US/debug/pdf
Remote-Addr: 127.0.0.1
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; es-ES; rv:1.9.2.18) Gecko/20110622 CentOS/3.6-1.el5.centos Firefox/3.6.18

WSGI environment

ACTUAL_SERVER_PROTOCOL: HTTP/1.1
HTTP_ACCEPT: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
HTTP_ACCEPT_CHARSET: ISO-8859-1,utf-8;q=0.7,*;q=0.7
HTTP_ACCEPT_ENCODING: gzip,deflate
HTTP_ACCEPT_LANGUAGE: es-es,es;q=0.8,en-us;q=0.5,en;q=0.3
HTTP_CONNECTION: keep-alive
HTTP_COOKIE: session_id_8000=2457161abd636d17cdb104a9e579050c797b9ff2
HTTP_HOST: 127.0.0.1:8000
HTTP_KEEP_ALIVE: 115
HTTP_REFERER: http://127.0.0.1:8000/en-US/debug/pdf
HTTP_USER_AGENT: Mozilla/5.0 (X11; U; Linux x86_64; es-ES; rv:1.9.2.18) Gecko/20110622 CentOS/3.6-1.el5.centos Firefox/3.6.18
PATH_INFO: /en-US/debug/pdf_echo_loopback
QUERY_STRING:

REMOTE_ADDR: 127.0.0.1
REMOTE_PORT: 46402
REQUEST_METHOD: GET
SCRIPT_NAME:

SERVER_NAME: 0.0.0.0
SERVER_PORT: 8000
SERVER_PROTOCOL: HTTP/1.1
SERVER_SOFTWARE: CherryPy/3.1.2 WSGI Server
wsgi.errors: ', mode 'w' at 0x2b6d0ca121c8>
wsgi.input:
wsgi.multiprocess: False
wsgi.multithread: True
wsgi.run_once: False
wsgi.url_scheme: http
wsgi.version: (1, 0)

Platform

Linux
splunkssd.exn.local
2.6.18-238.19.1.el5

1 SMP Fri Jul 15 07:31:24 EDT 2011

x86_64
x86_64

You are using 127.0.0.1:8000, which is connected to splunkd @101277 at https://127.0.0.1:8089 on Wed Aug 10 14:11:13 2011.

Re: My PDF Server doesn´t run

ARothman — Fri, 10 Feb 2012 17:34:04 GMT

Bumping this thread because I'm running into the same problem as the OP.

When trying the status page on the PDF Report Server console, I am getting this (error: [Errno 104] Connection reset by peer), but when I am on a remote console which is going to be using this one for PDF delivery, I am receiving error: [Errno 10054] An existing connection was forcibly closed by the remote host

I am running RHEL6 32bit
I have installed xorg-x11-server-Xvfb, xorg-x11-xauth, bitstream-vera-fonts

Does anyone have any ideas?

Re: My PDF Server doesn´t run

ChrisG — Mon, 28 Sep 2020 11:23:10 GMT

Not sure if this will help, but the PDF Server topic in the Troubleshooting Manual (http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/PDFTS ) includes the following information:

"The hostname parameter in the alert_actions.conf email stanza dictates the address used for calling the app server. This host/address must resolve on the local/remote system. If it doesn't resolve, you might see a "connection refused" error. If you specify a host name in the email settings configuration, alert_actions.conf, or in a specific alert in action.email.hostname, the host name must resolve on both the local Splunk node, and on the PDF server. If you do not specify a host name, the host name returned by the local operating system must similarly resolve."

Also: are you using the latest version of the PDF Server (v. 1.3)?

Re: My PDF Server doesn´t run

ARothman — Fri, 10 Feb 2012 21:08:28 GMT

Ahh, okay. This makes sense... so I was pointing it to http://myipaddress:8089/ (when it should have been https://myipaddress:8089/) and it was returning a connection refused. I was confused by this because Chrome was auto-filling in https instead of http.

Problem I appear to be having now is that I'm getting Timed out while waiting for a response in the blue status box instead of the connection refused. As per my above post, I have made sure the required components are installed on the box.

Re: My PDF Server doesn´t run

albertoperez — Mon, 13 Feb 2012 09:37:45 GMT

Thank you. I´ll check it if I can, although this project was stopped due to several issues without clear documentation and support.
It´s a pity, the product idea is great.

Thank you very much.

topic Re: My PDF Server doesn´t run in Knowledge Management

My PDF Server doesn´t run

1 SMP Fri Jul 15 07:31:24 EDT 2011

Re: My PDF Server doesn´t run

Re: My PDF Server doesn´t run

Re: My PDF Server doesn´t run

Re: My PDF Server doesn´t run