In the past (6.3.0 and previous versions) our users had scheduled some dashboards for sending a PDF report via email. Resulting in a corresponding stanza in the savedsearches.conf. Then some of these dashboards have been deleted. The stanza in savedsearches.conf remained - which always has been a little bit strange, but there were no errors. The emails have not been sent any longer.
Now, after upgrading to 6.4.2, all these old stanzas become active sending out emails complaining "An error occurred while generating the PDF. Please see python.log for detail." The reason is that the dashboard is not available because it has been deleted.
But it's not only for "old deleted" dashboards. You can test this with 6.4.2: Create a dashboard. Schedule it with PDF report. And then delete the dashboard. You'll get the error - at least I do.
So my question is: Is it a bug or a feature? Am I doing something wrong?
Thanks for help!
FYI: It's solved by Splunk support:
This is a known issue SPL-78612 since before 6.2 version as described in:
http://docs.splunk.com/Documentation/Splunk/6.4.2/ReleaseNotes/KnownIssues
The scheduled view can be deleted or disabled via the settings see answer blow:
https://answers.splunk.com/answers/28739/dashboard-deleted-pdf-email-schedule-still-exists.html
FYI: It's solved by Splunk support:
This is a known issue SPL-78612 since before 6.2 version as described in:
http://docs.splunk.com/Documentation/Splunk/6.4.2/ReleaseNotes/KnownIssues
The scheduled view can be deleted or disabled via the settings see answer blow:
https://answers.splunk.com/answers/28739/dashboard-deleted-pdf-email-schedule-still-exists.html
Support case opened.
I would open a support case.