Developing for Splunk Enterprise

Why is our daily scheduled report suddenly no longer producing a PDF with the following errors in python.log?


I have a scheduled report that runs daily producing a PDF document. Till now, the report was running well and the PDF was generated, but since the past few days, I am getting following error:

An error occurred while generating the PDF. Please see python.log for details.

And the logs say,

ERROR   __init__:477 - Socket error communicating with splunkd (error=The read operation timed out), path=xxxxx
2015-08-21 11:31:32,453 -0400 ERROR pdfgen_endpoint:223 - Exception raised while trying to prepare "test report " for rendering to PDF. Splunkd daemon is not responding: ('Error connecting to /xxx/xxx/search/search/parser: The read operation timed out',)
2015-08-21 11:31:32,453 -0400 ERROR pdfgen_endpoint:229 - No views prepared without exceptions. Bailing out of Integrated PDF Generation.
2015-08-21 11:31:32,481 -0400 ERROR sendemail:964 - An error occurred while generating a PDF: Failed to fetch PDF (status = 400): Unable to render PDF.

Can someone please help me solve this.



Looks like your report is taking too long to generate and the search is expiring.

How long does your search take to complete?

If this is the issue then you will need to accelerate the report


My search hardly takes less than a minute to complete.


Have you tried restarting the splunkd service?

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!