Alerting

Large PDF reports not working?

dskillman
Splunk Employee
Splunk Employee

Even though I'm able to view the sample PDF in mail settings, I see this in the bottom of email when attaching PDFs:

An error occurred while generating a PDF of this report: Failed to fetch PDF from appserver:

Is it possible that the report is too large to generate a PDF for?

Tags (2)

gkanapathy
Splunk Employee
Splunk Employee

well, yours might be unusally large.

0 Karma

Johnvey
Contributor

There isn't an explicit restriction around size -- rather there is a default timeout around how long it takes searches to complete. The basic steps to troubleshoot PDF are:

  1. check the PDF status page, ex: http://localhost:8000/debug/pdf
  2. check the debug logs in /var/log/splunk/python.log for errors

Common problem resolutions:

  1. Check that the setting in "Manager -> System Settings -> Email Alert Settings -> Link Hostname" is a valid, reachable address (or just left blank).
  2. Splunk version 4.1.0 PDF server did not work with splunkweb instances set to SSLv3 only configuration. This was resolved in 4.1.1.
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!