I have read thru some other posts but I am still not sure if this is a bug or misconfig on my alert.
I have a rather simple search running to check when a certain event count > 10, for the Last 1 hour.
The alert is scheduled to "Run every hour At 15 minutes past the hour"
The alert sends an email with results inline, which I can verify are correct, but the PDF is showing "No Results Found".
The Search Head is 6.3.1 and not sure if this is a bug.
Or do I need to adjust the alert schedule to be more or less frequent than the search?
@Logwrangler : did you setup your alert to have PDF as an attachment..??
I would check index=internal source=pdfgen.log and index=_internal source=python.log to get more details about your scheduled report.