How to get PDF REPORT SERVER app get working

[splunksurekha]

Hi,

I have installed PDF report server app but unable to launch the app while am trying to launch it am getting error

404 Not found
Splunk cannot find the "setup" view.

Could you please let me know how to get it working correctly ???

Thanks
Surekha

[splunksurekha]

Hi,

Is there a similar app like PDF Report server which supports higher versions of splunk.

Please suggest a app which does the same work of PDF report server as it doesn't work for all splunk versions.

Thanks
Surekha

[splunksurekha]

Hi,

I am using splunk 5.0.6
and in searchhead in alert_actions.conf i have modified reportServerEnabled =1
and restarted splunk but no luck still getting the same error while launching app "PDF server for linux"
404 Not Found
Splunk cannot find the "setup" view.

Please help or let me know if any substitute app is there which does the same job.

Thanks
surekha.

[harsmarvania57]

Why you want to launch the app in Searchhead?

Because by default app is not visible and is not required to visible in splunk search head.

Default app.conf

    [ui]
    is_visible = false

[splunksurekha]

Hi,

Can someone please tell me where these reports are getting save in the server level.
In the searchhead ? which path the sheduled reports will get saved in ?

Thanks
Surekha.

[harsmarvania57]

If you are running stand alone search head then all schedule search result will be saved in

$SPLUNK_HOME/var/run/splunk/dispatch/

In dispatch directory output will be in saved in directory something like this

scheduler__nobody__SplunkDeploymentMonitor__RMD5789fd9b355b6dd63_at_1429532100_1020546

For each job, directory name is different
If you are running search head pooling then it will be in pooled directory, suppose your pool directory is /opt/splunk/config

then dispatch directory path will be

/opt/splunk/config/var/run/splunk/dispatch/

[splunksurekha]

how am i going to use the app then without launching it
When i go to app and click on pdf server for linux i get this error.

[harsmarvania57]

If you want to use this app, no need to launch this app. When you print any PDF file or schedule a search with output as a PDF file it will automatically use this app. You can check $SPLUNK_HOME/var/log/python.log to check the logs.

When you go to Splunk Web -> Manager -> System Settings -> Email alert stettings

In PDF Report Settings

You can see Remote PDF Report Server URL box which is empty and remarks is saying that If PDF Report Server app is being used on a remote machine, set URL above. For example, https://remoteserver:8089/ - Leave blank to use a local PDF server (status page). Does not affect integrated PDF generation. Learn more.

And you can check whether your PDF server is working or not with URL https://splunkservername:8000/en-US/debug/pdf

[harsmarvania57 · Accepted solution]

Which splunk version are you running? Because as per https://splunkbase.splunk.com/app/314/ this app is officially deprecated and is not supporting splunk version 6 and above.

If you want to configure in splunk version 5 then enable report server in alert_actions.conf

 reportServerEnabled = 1

Then restart splunk search head.
After restart you can verify PDF Report server with URL https://splunkservername:8000/en-US/debug/pdf