Schedule PDF Delivery - Why is the URL in the e-mail missing domain?

[masonmorales]

I'm using the Schedule PDF Delivery function in Splunk 6.1.3. The e-mails are sending fine, but the hyperlink to the dashboard that's in the e-mail from Splunk is missing the server's domain name. (i.e. it's linking to https://mysplunk:8000/... instead of https://mysplunk.mydomain.com:8000/...)

I am guessing the server FQDN comes from one of the options in System settings » General settings. Is that right? If so, is the PDF hyperlink getting the server FQDN from "Splunk server name" or "Default host name"?

[bosburn_splunk · Accepted solution]

Mason,
This is configured in the alert_actions.conf file (details here - http://docs.splunk.com/Documentation/Splunk/6.2.2/Admin/Alertactionsconf )

  hostname = [protocol]<host>[:<port>]
    * Sets the hostname used in the web link (url) sent in alerts.
    * This value accepts two forms.
       * hostname
        examples: splunkserver, splunkserver.example.com
       * protocol://hostname:port
        examples: http://splunkserver:8000, https://splunkserver.example.com:443
    * When this value is a simple hostname, the protocol and port which
      are configured within splunk are used to construct the base of
      the url.
    * When this value begins with 'http://', it is used verbatim.  
      NOTE: This means the correct port must be specified if it is not
      the default port for http or https.
    * This is useful in cases when the Splunk server is not aware of
      how to construct an externally referenceable url, such as SSO
      environments, other proxies, or when the Splunk server hostname
      is not generally resolvable.
    * Defaults to current hostname provided by the operating system, 
      or if that fails, "localhost".
    * When set to empty, default behavior is used.

[immortalraghava]

Hi bosburn,

Is there a way to remove the link from appearing in the email containing the dashboard ?

I have the pdf as an attachment that is fine. I do not want to include a link to the chart.

I have already tried include.view_link = 0 and include.results_link = 0. They doesn't seem to work.

Any ideas ?

Thanks

[masonmorales]

Thank you. Is there a way to set this through splunkweb though? Or even through the API? I unfortunately do not have SSH access to the server at this time, but I do have admin via splunkweb.