- Find Answers
- :
- Using Splunk
- :
- Other Using Splunk
- :
- Reporting
- :
- Email PDF report of a dashboard
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello guys,
I am trying to create a "Scheduled PDF Report of a dashboard ". Currently running a two-panel dashboard and when I schedule a report no PDF is received :
"Scheduled view delivery.
A PDF snapshot has been generated for the view: ....
"
However if I remove one panel, the PDF report is attached to the email.
Both panels run 24h searches, timechart span=10m so they generate together roughly 300 rows of results. If I generate the report manually, it works fine. What could be the problem ?
Thanks in advance,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So, the problem was, that I first used an inline search (doesn't work) , then scheduled single panel reports (doesn't work)
If you setup a dashboard made of predefined reports, and perform a "schedule pdf delivery" for the whole dashboard, then it works like a charm, sending a PDF with charts of every panel on the needed dashboard.
Kind regards,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So, the problem was, that I first used an inline search (doesn't work) , then scheduled single panel reports (doesn't work)
If you setup a dashboard made of predefined reports, and perform a "schedule pdf delivery" for the whole dashboard, then it works like a charm, sending a PDF with charts of every panel on the needed dashboard.
Kind regards,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Glad you found your solution @atanasmitev 🙂 be sure to accept your answer!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ok, that's the "workaround". But it looks like a bug to me? Any splunker to shed some light on this behavior?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am not sure it matters, I tested, no luck yet.
I'll do some more testing and ask further.
Thanks
🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are you keeping both the panels in same row?
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
