- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have a report that runs once a day that generates a PDF chart based on a view. When I load the view in my browser and click "Generate PDF" it takes approximately 3 seconds and the PDF is successfully rendered in my browser (Chrome). However the chart in the emailed report has no data, just the axis.
I'm using Splunk 5.0.1 and I don't have the PDF server app installed.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This problem has gone away for me in Splunk 6.0.2
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
here I still have the problem, version 6.1.3
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I also have the issue that some results do not come through in a daily PDF report (version 6.3).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I had a similar issue, 2 panes out of 6 on a dashboard would have no data if a chart or 'no results' if a table.
Creating a saved search and using a searchName element instead of a searchString for the table/chart panes resolved it.
The saved searches are also scheduled, but it also worked on the first run before a scheduled search ran. I don't know if that mattered or not.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Same here (version 6.1.3).
I had two online searches, not overly complicated, but they didn't show up in the sheduled reports (sent via the sendemail command).
Moving them to saved searches (not sheduled, jobs/artifacts deleted), the pdf now includes the data.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have the same problem. It seems like a race condition as the PDF gets generated before the data is fully downloaded, so it's a matter of which finished first the data arriving from Splunk and how long the PDF takes to render.
The issue I am seeing is that I have multiple saved searches that run once a day at the same time. I have a dashboard that has a panel for each of the searches. I created a scheduled PDF to be run well after the saved searches are run. The PDF that gets delivered only has data in the panels that have less than 100 or so rows (this is just a guess). Empirically what I've seen is 10 rows of results show up fine but anything over 180 rows of data does not show up at all.
I have not found a solution for this.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

I agree it feels like a race condition. All my searches are scheduled so there should be no delay waiting for results.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here's a link to the XML generating the report http://pastebin.com/aEjgCS73
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have the same issue. My PDF is shown correctly in my broser (firefox) x and y axis and leganda are shown, but no graphic. Generate PDF is based on a dashboard:
{"stroop":0x000000,"traagst":0xFF0000,"traag":0xffa500,"snel":0xffff00,"snelst":0x00ff00}
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Could you paste your XML/Search so we could have a test? 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Has nobody encountered this?
