Alerting

Large PDF reports not working?

Splunk Employee
Splunk Employee

Even though I'm able to view the sample PDF in mail settings, I see this in the bottom of email when attaching PDFs:

An error occurred while generating a PDF of this report: Failed to fetch PDF from appserver:

Is it possible that the report is too large to generate a PDF for?

Tags (2)

Splunk Employee
Splunk Employee

well, yours might be unusally large.

0 Karma

Contributor

There isn't an explicit restriction around size -- rather there is a default timeout around how long it takes searches to complete. The basic steps to troubleshoot PDF are:

  1. check the PDF status page, ex: http://localhost:8000/debug/pdf
  2. check the debug logs in /var/log/splunk/python.log for errors

Common problem resolutions:

  1. Check that the setting in "Manager -> System Settings -> Email Alert Settings -> Link Hostname" is a valid, reachable address (or just left blank).
  2. Splunk version 4.1.0 PDF server did not work with splunkweb instances set to SSLv3 only configuration. This was resolved in 4.1.1.
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!