File does not begin with ‘%PDF-’

[tigraim]

I am trying to demo the pdf app on a linux install, but I am getting the titled error. I've installed a separate linux instance and get the same message. I've turned on debug for python and notice in the logs I am getting multiple errors. One being a firefox dependency, although I have the latest firefox version. In both cases I am getting several 'pdfHandler' errors as well as a 'timeout in locking authority file'. Any help on this issue would be appreciated:

splunk instance 1:

2010-08-24 19:42:40,342 DEBUG   cli_common:310 - Preloading from '/opt/splunk/splunk/var/run/splunk/merged/server.conf'.
2010-08-24 19:42:40,342 DEBUG Preloading from '/opt/splunk/splunk/var/run/splunk/merged/server.conf'.
2010-08-24 19:42:40,344 DEBUG   cli_common:310 - Preloading from '/opt/splunk/splunk/var/run/splunk/merged/web.conf'.
2010-08-24 19:42:40,344 DEBUG Preloading from '/opt/splunk/splunk/var/run/splunk/merged/web.conf'.
2010-08-24 19:42:40,907 DEBUG   cli_common:313 - Running btool for 'pdf_server.conf'.
2010-08-24 19:42:40,907 DEBUG Running btool for 'pdf_server.conf'.
2010-08-24 19:42:42,867 WARNING pdfhandler:340 - body=Splunk;4.1.4;4.1.4
2010-08-24 19:42:42,867 WARNING body=Splunk;4.1.4;4.1.4
2010-08-24 19:42:42,870 WARNING pdfhandler:341 - entries=['Splunk', '4.1.4', '4.1.4']
2010-08-24 19:42:42,870 WARNING entries=['Splunk', '4.1.4', '4.1.4']
2010-08-24 19:42:45,495 INFO    xvfb:45 - Started new X server. Now 1 active
2010-08-24 19:42:45,495 INFO Started new X server. Now 1 active
2010-08-24 19:42:45,496 WARNING pdfhandler:437 - Restricting Firefox to following hosts only: *:53 172.20.161.194
2010-08-24 19:42:45,496 WARNING Restricting Firefox to following hosts only: *:53 172.20.161.194
2010-08-24 19:42:45,497 INFO    pdfhandler:442 - Executing /opt/splunk/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox -print https://172.20.161.194:8000/debug/pdf_echo -printmode pdf -printfile /tmp/tmpJOAVi9 -title https://172.20.161.194:8000/debug/pdf_echo -orientation portrait -paperwidth 216 -paperheight 279 -mode default -timeout 180 -windowsize 1200x768 -cookie session_id_8000=1841cf4081d35269fb67df22fbca79b81ea610ea
2010-08-24 19:42:45,497 INFO Executing /opt/splunk/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox -print https://172.20.161.194:8000/debug/pdf_echo -printmo[7m--More--(96%)[27m
de pdf -printfile /tmp/tmpJOAVi9 -title https://172.20.161.194:8000/debug/pdf_echo -orientation portrait -paperwidth 216 -paperheight 279 -mode default -timeout 180 -windowsize 1200x768 -cookie session_id_8000=1841cf4081d35269fb67df22fbca79b81ea610ea
2010-08-24 19:43:06,324 WARNING xvfb:251 - Got response from xauth: /usr/bin/xauth:  timeout in locking authority file /opt/splunk/splunk/var/run/splunk/xvfb/xauth-5/Xauthority
2010-08-24 19:43:06,324 WARNING Got response from xauth: /usr/bin/xauth:  timeout in locking authority file /opt/splunk/splunk/var/run/splunk/xvfb/xauth-5/Xauthority
2010-08-24 19:43:06,328 INFO    xvfb:205 - Assigned DISPLAY :5
2010-08-24 19:43:06,328 INFO Assigned DISPLAY :5
2010-08-24 19:43:06,329 INFO    xvfb:115 - Starting X Server: ['/usr/bin/Xvfb', ':5', '-screen', '0', '3000x768x24', '-nolisten', 'tcp']
2010-08-24 19:43:06,329 INFO Starting X Server: ['/usr/bin/Xvfb', ':5', '-screen', '0', '3000x768x24', '-nolisten', 'tcp']
2010-08-24 19:43:06,329 INFO    xvfb:116 - Starting X Server env: {'XAUTHORITY': '/opt/splunk/splunk/var/run/splunk/xvfb/xauth-5/Xauthority'}
2010-08-24 19:43:06,329 INFO Starting X Server env: {'XAUTHORITY': '/opt/splunk/splunk/var/run/splunk/xvfb/xauth-5/Xauthority'}
2010-08-24 19:43:08,507 INFO    xvfb:122 - X Started
2010-08-24 19:43:08,507 INFO X Started
2010-08-24 19:43:24,858 DEBUG   pdfhandler:467 - FF stderr: /opt/splunk/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox-bin: symbol lookup error: /usr/lib/li[7m--More--(98%)[27m
bgnome-2.so.0: undefined symbol: g_malloc_n
2010-08-24 19:43:24,858 DEBUG FF stderr: /opt/splunk/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox-bin: symbol lookup error: /usr/lib/libgnome-2.so.0: undefined symbol: g_malloc_n
2010-08-24 19:43:24,911 ERROR   pdfhandler:503 - Execution of Firefox for i386 failed
2010-08-24 19:43:24,911 ERROR Execution of Firefox for i386 failed
2010-08-24 19:43:24,915 ERROR   pdfhandler:505 - FF STDERR: /opt/splunk/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox-bin: symbol lookup error: /usr/lib/libgnome-2.so.0: undefined symbol: g_malloc_n
2010-08-24 19:43:24,915 ERROR FF STDERR: /opt/splunk/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox-bin: symbol lookup error: /usr/lib/libgnome-2.so.0: undefined symbol: g_malloc_n
2010-08-24 19:43:24,938 DEBUG   pdfhandler:622 - statuslog: None
2010-08-24 19:43:24,938 DEBUG statuslog: None
2010-08-24 19:43:24,946 ERROR   pdfhandler:637 - (500) Failed to generate a report using Firefox: Failed to start: Check that all Firefox dependencies are met
2010-08-24 19:43:24,946 ERROR (500) Failed to generate a report using Firefox: Failed to start: Check that all Firefox dependencies are met
2010-08-24 19:43:24,957 WARNING xvfb:132 - Stopping X Server 5
2010-08-24 19:43:24,957 WARNING Stopping X Server 5

splunk instance 2:

2010-08-25 07:24:38,846 INFO    xvfb:115 - Starting X Server: ['/usr/bin/Xvfb', ':5', '-screen', '0', '3000x768x24', '-nolisten', 'tcp']
2010-08-25 07:24:38,846 INFO Starting X Server: ['/usr/bin/Xvfb', ':5', '-screen', '0', '3000x768x24', '-nolisten', 'tcp']
2010-08-25 07:24:38,847 INFO    xvfb:116 - Starting X Server env: {'XAUTHORITY': '/opt/splunk/var/run/splunk/xvfb/xauth-5/Xauthority'}
2010-08-25 07:24:38,847 INFO Starting X Server env: {'XAUTHORITY': '/opt/splunk/var/run/splunk/xvfb/xauth-5/Xauthority'}
2010-08-25 07:24:40,894 INFO    xvfb:122 - X Started
2010-08-25 07:24:40,894 INFO X Started
2010-08-25 07:24:43,613 ERROR   pdfhandler:503 - Execution of Firefox for i386 failed
2010-08-25 07:24:43,613 ERROR Execution of Firefox for i386 failed
2010-08-25 07:24:43,614 ERROR   pdfhandler:505 - FF STDERR: (firefox-bin:4341): Pango-WARNING **: failed to choose a font, expect ugly output. engine-type='PangoRenderFc', script='common'
2010-08-25 07:24:43,614 ERROR FF STDERR: (firefox-bin:4341): Pango-WARNING **: failed to choose a font, expect ugly output. engine-type='PangoRenderFc', script='common'
2010-08-25 07:24:43,615 ERROR   pdfhandler:505 - FF STDERR: (firefox-bin:4341): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/tmp/target/etc/gtk-2.0/gdk-pixbuf.loaders': No such file or directory
2010-08-25 07:24:43,615 ERROR FF STDERR: (firefox-bin:4341): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/tmp/target/etc/gtk-2.0/gdk-pixbuf.loaders': No such file or directory
2010-08-25 07:24:43,615 ERROR   pdfhandler:505 - FF STDERR: (firefox-bin:4341): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/tmp/target/etc/gtk-2.0/gdk-pixbuf.loaders': No such file or directory
2010-08-25 07:24:43,615 ERROR FF STDERR: (firefox-bin:4341): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/tmp/target/etc/gtk-2.0/gdk-pixbuf.loaders': No such file or directory
2010-08-25 07:24:43,616 ERROR   pdfhandler:505 - FF STDERR: (firefox-bin:4341): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/tmp/target/etc/gtk-2.0/gdk-pixbuf.loaders': No such file or directory
2010-08-25 07:24:43,616 ERROR FF STDERR: (firefox-bin:4341): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/tmp/target/etc/gtk-2.0/gdk-pixbuf.loa[7m--More--(86%)[27m
ders': No such file or directory
2010-08-25 07:24:43,616 ERROR   pdfhandler:505 - FF STDERR: D-Bus library appears to be incorrectly set up; failed to read machine uuid: Failed to open "/var/lib/dbus/machine-id": No such file or directory
2010-08-25 07:24:43,616 ERROR FF STDERR: D-Bus library appears to be incorrectly set up; failed to read machine uuid: Failed to open "/var/lib/dbus/machine-id": No such file or directory
2010-08-25 07:24:43,619 ERROR   pdfhandler:505 - FF STDERR: See the manual page for dbus-uuidgen to correct this issue.
2010-08-25 07:24:43,619 ERROR FF STDERR: See the manual page for dbus-uuidgen to correct this issue.
2010-08-25 07:24:43,620 ERROR   pdfhandler:505 - FF STDERR: D-Bus not built with -rdynamic so unable to print a backtrace
2010-08-25 07:24:43,620 ERROR FF STDERR: D-Bus not built with -rdynamic so unable to print a backtrace
2010-08-25 07:24:43,620 ERROR   pdfhandler:505 - FF STDERR: /opt/splunk/etc/apps/pdfserver/bin/firefox-i386/run-mozilla.sh: line 146:  4341 Aborted                 "$prog" ${1+"$@"}
2010-08-25 07:24:43,620 ERROR FF STDERR: /opt/splunk/etc/apps/pdfserver/bin/firefox-i386/run-mozilla.sh: line 146:  4341 Aborted                 "$prog" ${1+"$@"}
2010-08-25 07:24:43,634 ERROR   pdfhandler:637 - (500) Failed to generate a report using Firefox: Failed to start: Check that all Firefox dependencies are met
2010-08-25 07:24:43,634 ERROR (500) Failed to generate a report using Firefox: F[7m--More--(98%)[27m
ailed to start: Check that all Firefox dependencies are met
2010-08-25 07:24:43,635 WARNING xvfb:132 - Stopping X Server 5
2010-08-25 07:24:43,635 WARNING Stopping X Server 5

[monchi123]

If reinstalling Firefox (or your browser) and reinstalling Adobe Acrobat Reader does not work is because it is inheriting settings from past versions. What worked for me is doing a manual uninstall of all stored application data. In Win 7 Go to C:/users/your name/AppData/Roaming/Mozilla or Microsoft/ and the try to delete all of the content related to your browser including extensions and plugins. If you don't have permission to delete folders then open it and delete file by file.

Note that you have to be able to view hidden files to access AppData folder. Then do the same for the AppData under Adobe folder. Then reinstall Firefox and acrobat reader. Done!

[monchi123]

If reinstalling Firefox (or your browser) and reinstalling Adobe Acrobat Reader does not work is because it is inheriting settings from past versions. What worked for me is doing a manual uninstall of all stored application data. In Win 7 Go to C:/users/your name/AppData/Roaming/Mozilla or Microsoft/ and the try to delete all of the content related to your browser including extensions and plugins. If you don't have permission to delete folders then open it and delete file by file.

Note that you have to be able to view hidden files to access AppData folder. Then do the same for the AppData under Adobe folder. Then reinstall Firefox and acrobat reader. Done!

[rsimmons]

Here's the answer to your issue pertaining to the file does not begin with ‘%PDF-’.

http://answers.splunk.com/questions/1945/pdf-server-404-and-file-does-not-begin-with-pdf

[ARothman]

Did you ever get this fixed? I'm running into the same exact issue as instance #2

[tigraim]

Becky, thanks for the info!

[rsimmons]

Good news! Splunk is working on a new PDF Report Server App that will be releasing soon, perhaps this will address your issue.

[tigraim]

Becky thanks for your attempt, but before posting I've went through all of the pdf postings on this site and tried all of these solutions. The answers don't match my problem, at any rate I was hoping perhaps there was someone else who experienced the same type of problem and had some success.