Large PDF reports not working?

Splunk Employee
Splunk Employee

Even though I'm able to view the sample PDF in mail settings, I see this in the bottom of email when attaching PDFs:

An error occurred while generating a PDF of this report: Failed to fetch PDF from appserver:

Is it possible that the report is too large to generate a PDF for?

Tags (2)

Splunk Employee
Splunk Employee

well, yours might be unusally large.

0 Karma


There isn't an explicit restriction around size -- rather there is a default timeout around how long it takes searches to complete. The basic steps to troubleshoot PDF are:

  1. check the PDF status page, ex: http://localhost:8000/debug/pdf
  2. check the debug logs in /var/log/splunk/python.log for errors

Common problem resolutions:

  1. Check that the setting in "Manager -> System Settings -> Email Alert Settings -> Link Hostname" is a valid, reachable address (or just left blank).
  2. Splunk version 4.1.0 PDF server did not work with splunkweb instances set to SSLv3 only configuration. This was resolved in 4.1.1.
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...