Reporting

[Splunk Cloud] Scheduled PDF Export Sometimes Doesn't Send

jsukenik
Engager

I have a dashboard that I have configured to "Schedule PDF Delivery" once a day on Splunk Cloud. However, once in a while, I do not receive an email. I am not sure how to debug or look into this, as it can be some combination of Splunk killing the scheduled search that is creating the PDF, it could be timing out, or there can be a problem with the Splunk mail server.

Are there any internal logs I could look at or known reasons why I would have this infrequent behavior in Splunk Cloud?

0 Karma
1 Solution

cmerriman
Super Champion

You might be able to look in index=_internal source=*python.log* to see if there are email errors. There is also index=_internal sourcetype=PDFGen* I believe that might have pdf errors.

View solution in original post

cmerriman
Super Champion

You might be able to look in index=_internal source=*python.log* to see if there are email errors. There is also index=_internal sourcetype=PDFGen* I believe that might have pdf errors.

jsukenik
Engager

Both of your queries allowed me to discover that the PDF was both generated and sent.

Turns out that it was sent to my spam folder on exactly those dates but not on other dates for some reason. Thank you for your help!

0 Karma
Get Updates on the Splunk Community!

There's No Place Like Chrome and the Splunk Platform

Watch On DemandMalware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

The Great Resilience Quest: 5th Leaderboard Update

The fifth leaderboard update for The Great Resilience Quest is out >> 🏆 Check out the ...

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...