Reporting

[Splunk Cloud] Scheduled PDF Export Sometimes Doesn't Send

jsukenik
Engager

I have a dashboard that I have configured to "Schedule PDF Delivery" once a day on Splunk Cloud. However, once in a while, I do not receive an email. I am not sure how to debug or look into this, as it can be some combination of Splunk killing the scheduled search that is creating the PDF, it could be timing out, or there can be a problem with the Splunk mail server.

Are there any internal logs I could look at or known reasons why I would have this infrequent behavior in Splunk Cloud?

0 Karma
1 Solution

cmerriman
Super Champion

You might be able to look in index=_internal source=*python.log* to see if there are email errors. There is also index=_internal sourcetype=PDFGen* I believe that might have pdf errors.

View solution in original post

cmerriman
Super Champion

You might be able to look in index=_internal source=*python.log* to see if there are email errors. There is also index=_internal sourcetype=PDFGen* I believe that might have pdf errors.

jsukenik
Engager

Both of your queries allowed me to discover that the PDF was both generated and sent.

Turns out that it was sent to my spam folder on exactly those dates but not on other dates for some reason. Thank you for your help!

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...