topic Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not in Dashboards & Visualizations

[BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

arayapati83 — Tue, 13 Mar 2018 15:24:21 GMT

I have a requirement to schedule a PDF weekly/monthly etc and show the Title of each section representing the Day From and Day To.

I created dynamic tokens and put that in the title. The dashboard shows it and when I click export PDF it shows appropriate dates but when I schedule a PDF the Auto Scheduled PDF doesn't show the dates, instead it shows $token_XX$ which means the tokens are not getting resolved with the auto scheduled PDF.

Modified the search query as I cant paste the original

Daily Stats - Report

<search>  
 <query>| makeresults
    | eval currentDate=strftime(relative_time(now(),"-1d"),"%m/%d/%Y")
    | eval minus1Date=strftime(relative_time(now(),"-1d"),"%m/%d/%Y")</query>
 <earliest>-1s@s</earliest>
 <latest>now</latest>
 <sampleRatio>1</sampleRatio>
 <done>
   <set token="tok_cur_Date">$result.currentDate$</set>
   <set token="tok_minus1_Date">$result.minus1Date$</set>
 </done>
</search>
<panel>
  <html>
    <style>.chartTitleText {font-size: 16px; font-weight:bold;}</style>
    <p class="chartTitleText">$tok_minus1_Date$ to $tok_cur_Date$</p>
  </html>
  <single>
    <title>Availability (Rounded after 2 Decimals)</title>
    <search>
      <query>index="prod" source="*" | stats count(eval(isSuccessful="Y"))  as SUCCESS_COUNT count as TOTAL | eval ATB=SUCCESS_COUNT/TOTAL*100 | table ATB</query>
      <earliest>-1d@d</earliest>
      <latest>now</latest>
    </search>
  </single>
</panel>

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

arayapati83 — Tue, 13 Mar 2018 15:37:49 GMT

@niketnilay

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

p_gurav — Wed, 14 Mar 2018 09:03:24 GMT

Hi,

Check this doc:
http://docs.splunk.com/Documentation/Splunk/7.1.0/Viz/DashboardPDFs#Limitations_to_PDF_generation

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

niketn — Wed, 14 Mar 2018 10:38:18 GMT

@arayapati83 I have updated your question to highlight your issue. Also adding the reference to the previous question where the issue is discussed: https://answers.splunk.com/answers/526670/display-datetime-range-in-dashbaord.html

As requested, if you have Splunk Entitlement, please reach out to Splunk Support to have the issue resolved!

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

arayapati83 — Thu, 15 Mar 2018 16:45:10 GMT

@p_gurav so r u saying its not possible at all?

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

arayapati83 — Thu, 15 Mar 2018 16:46:54 GMT

@niketnilay when you say splunk support are u saying to reach splunk support team at my organization?

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

niketn — Thu, 15 Mar 2018 17:43:17 GMT

If your organisation has purchased Splunk Support there would be an Entitlement Number which can be used to create a ticket with Splunk Support Team.

You can begin with your own Splunk Support Team for the details on this.

Could you also let us know as to what is the schedule of the Dashboard PDF generation?

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

arayapati83 — Fri, 16 Mar 2018 19:51:26 GMT

@niketnilay we have multiple.. monthly and quarterly is what we are most interested in

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

niketn — Mon, 19 Mar 2018 03:32:20 GMT

I would say do it manually until issue is resolved. Figure out who can create a case with Splunk Support or whether they have a workaround.

Re: [BUG] Why SPLUNK Dashboard export PDF resolves Tokens but Scheduled PDF does not

khusain_splunk — Tue, 14 Aug 2018 09:36:19 GMT

Refer to the below URL. This document clearly says that "Search result" and "Job information" tokens are not available for Scheduled PDF Delivery.

http://docs.splunk.com/Documentation/Splunk/7.1.1/Alert/EmailNotificationTokens#Tokens_available_for_email_notification

For scheduled PDF delivery, you can use tokens in the following fields of an email:

Subject
Message
Footer

See below document for more information.

http://docs.splunk.com/Documentation/Splunk/7.1.2/Viz/DashboardPDFs