Reporting

Dashboard still not finished in PDF report

gljiva
Path Finder

Hi, I have a dashboard with several charts that take some time to finish (like 2-4mins) and when scheduling them for PDF delivery i get PDF files for which screenshots were taken before dashboard finished loading.
I have tried extending necessary timeouts in following files:
pdf_server.conf

firefox_timeout = 660  

pdf_handler.py

DEFAULT_TIMEOUT = 11*60
HARD_TIMEOUT_DELAY = 3*60  

Even after setting 11 minute timeout PDF still sometimes does not finish in time?! Is there a way to pass argument to firefox only to print to pdf after XX minutes have passed? It seems that PDF is created sooner than timeout is reached.
Note: I have opened dashboard in my browser many times and it never takes more than few minutes.
What are recommended optimizations for efficient pdf reporting?

Tags (2)

the_wolverine
Champion

I'm encountering the same issue and my queries are summary optimized. Further, the queries are prescheduled and the PDF Report is not loading two of the panels. The panels that are not loading are extra long -- contains 100's to over 1000 lines. It appears that PDF snapshot is not waiting for the entire dashboard to load before it captures the image.

When I manually load the dashboard it takes about 20 seconds to load, so not too long. Is there some setting that tells PDF snapshot to wait X time before capturing?

0 Karma

williamche
Path Finder

Just out of curiosity, would scheduling the individual queries in the dashboard to automatically run, say, 6 minutes before the dashboard's scheduled time help with this? So, in theory, when the dashboard job is kicked of, it'd just grab the the cached query results.

Another work around is to optimize the individual queries in the dashboard by utilizing the summary index.

Hope this helps.

-w

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...