Team,
I am still struggling with the pdf reports generated out of the Splunk WAS Plugin. I am getting the emails and I see the report placeholders, but they are empty 😞
The python.log says -
2012-07-25 14:35:59,270 INFO pdfhandler:628 - Generated pdf file. bytes=103335 time=24.04
2012-07-25 14:35:59,270 INFO Generated pdf file. bytes=103335 time=24.04
2012-07-25 14:35:59,276 WARNING xvfb:132 - Stopping X Server 7
2012-07-25 14:35:59,276 WARNING Stopping X Server 7
2012-07-25 14:36:03,317 INFO Generated PDF for email
2012-07-25 14:36:03,317 DEBUG simpleRequest > GET https://127.0.0.1:8089/services/search/jobs/scheduler__admin_c3BsdW5rX2FwcF93YXM_X1NjaGVkdWxlZFZpZXdfX2Vycm9ycw_at_1343244900_cba568bb194d124c?message_level=warn [] sessionSource=direct
2012-07-25 14:36:03,324 DEBUG simpleRequest < server responded status=200 responseTime=0.0067s
2012-07-25 14:36:03,324 DEBUG getStatus - elapsed=0.00692391395569 nextRetry=0.0500000026555
2012-07-25 14:36:03,537 INFO Sending email. subject="Splunk Alert: errors", results_link="http://d-csdttk1.target.com:9000/app/splunk_app_was/@go?sid=scheduler__admin_c3BsdW5rX2FwcF93YXM_X1NjaGVkdWxlZFZpZXdfX2Vycm9ycw_at_1343244900_cba568bb194d124c", recepients="['xxx.xxx@xxx.xxx]"
2012-07-25 14:36:29,346 INFO pdfhandler:628 - Generated pdf file. bytes=81621 time=360.36
2012-07-25 14:36:29,346 INFO Generated pdf file. bytes=81621 time=360.36
2012-07-25 14:36:29,352 WARNING pdfhandler:749 - Firefox timed out while waiting for the report to be rendered - Incomplete snapshot generated
2012-07-25 14:36:29,352 WARNING Firefox timed out while waiting for the report to be rendered - Incomplete snapshot generated
2012-07-25 14:36:29,353 WARNING xvfb:132 - Stopping X Server 5
2012-07-25 14:36:29,353 WARNING Stopping X Server 5
Some more checks -
grep POST.*renderpdf splunkd_access.log
127.0.0.1 - - [25/Jul/2012:14:30:26.719 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 103648 - - - 31290ms
127.0.0.1 - - [25/Jul/2012:14:35:32.952 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 103648 - - - 30361ms
127.0.0.1 - - [25/Jul/2012:14:30:26.704 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 81934 - - - 366687ms
127.0.0.1 - - [25/Jul/2012:14:40:33.007 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 103935 - - - 29943ms
127.0.0.1 - - [25/Jul/2012:14:35:32.932 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 81572 - - - 366620ms
127.0.0.1 - - [25/Jul/2012:14:45:15.297 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 103465 - - - 30515ms
127.0.0.1 - - [25/Jul/2012:14:40:09.085 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 81765 - - - 366597ms
127.0.0.1 - - [25/Jul/2012:14:50:21.510 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 103465 - - - 30488ms
127.0.0.1 - - [25/Jul/2012:14:45:15.289 -0500] "POST /services/pdfserver/renderpdf HTTP/1.1" 200 81799 - - - 366623ms
I tried the following to get things moving -
Navigated to '$SPLUNK_HOME/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/debug.py' and changed the value of 'timeout' to 200.
Navigated to $SPLUNK_HOME/etc/system/default/pdf_server.conf and added the following lines to the end of the file
[settings]
screenshot_enabled = True
restrict_to_splunkweb = False
firefox_timeout = 340
Edited the $SPLUNK_HOME/lib/python2.7/site-packages/splunk/rest/init.py file and updated the following -
SPLUNKD_CONNECTION_TIMEOUT = 300
Restarted the Splunk Server
Any other tips/tricks to get this working?
... View more