topic Large PDF reports not working? in Alerting

Large PDF reports not working?

dskillman — Sat, 24 Apr 2010 06:04:48 GMT

Even though I'm able to view the sample PDF in mail settings, I see this in the bottom of email when attaching PDFs:

An error occurred while generating a PDF of this report: Failed to fetch PDF from appserver:

Is it possible that the report is too large to generate a PDF for?

Re: Large PDF reports not working?

Johnvey — Tue, 27 Apr 2010 02:48:18 GMT

There isn't an explicit restriction around size -- rather there is a default timeout around how long it takes searches to complete. The basic steps to troubleshoot PDF are:

check the PDF status page, ex: http://localhost:8000/debug/pdf
check the debug logs in /var/log/splunk/python.log for errors

Common problem resolutions:

Check that the setting in "Manager -> System Settings -> Email Alert Settings -> Link Hostname" is a valid, reachable address (or just left blank).
Splunk version 4.1.0 PDF server did not work with splunkweb instances set to SSLv3 only configuration. This was resolved in 4.1.1.

Re: Large PDF reports not working?

gkanapathy — Tue, 27 Apr 2010 07:04:01 GMT

well, yours might be unusally large.