Splunk Search

Splunk PDF export issue with "empty" pdf

flo_cognosec
Communicator

Actually the view below shows "No results found." in the browser by opening the view and as soon as I try to generate a pdf I get an empty graph with just the two axis shown.
(Printing the View and THEN exporting it to pdf works, so the web "output" is def. fine)
I would like to get rid of the graph with the axis and get a result in the pdf as in the web-gui: No results found.

How to either exclude an empty report from the pdf generation or output the fact that no data matches the query ?

Splunk Vers. 5.0.1
PDF Server for Linux 1.2
Sideview Utils 1.3.5
Search 5.0.1

<?xml version='1.0' encoding='utf-8'?>
<dashboard>
  <label>Report</label>
  <row>
    <chart>
      <searchString>index="summary" event="failed_log" | timechart fixedrange=True sum(count) by user</searchString>
      <title>Failed Login</title>
      <earliestTime>-1m@m</earliestTime>
      <latestTime>now</latestTime>
      <option name="charting.axisLabelsY.majorUnit">1</option>
      <option name="charting.axisTitleX.text">time</option>
      <option name="charting.axisTitleY.text">count</option>
      <option name="charting.chart">column</option>
      <option name="charting.chart.stackMode">stacked</option>
      <option name="charting.layout.splitSeries">false</option>
      <option name="charting.legend.placement">right</option>
    </chart>
  </row>
</dashboard>
0 Karma
1 Solution

jayannah
Builder

This the limitation in the Splunk. Not supported in the latest version aswell.

http://docs.splunk.com/Documentation/Splunk/6.1.1/Viz/DashboardPDFs

View solution in original post

jayannah
Builder

This the limitation in the Splunk. Not supported in the latest version aswell.

http://docs.splunk.com/Documentation/Splunk/6.1.1/Viz/DashboardPDFs

flo_cognosec
Communicator

Update

This seems to be a bug in splunk. At least that's what I got in an support email.
So if this happens to you, update to a later version of splunk

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...