Dashboards & Visualizations

Why am I not receiving the scheduled pdf delivery of my dashboard with my alert_actions.conf settings in Splunk 6.0.5?

basanthp
Path Finder

Hi,

Can someone please point out what am I missing below? I am not receiving the scheduled pdf dashboard delivery in my inbox. No errors reported in python.log, scheduler.log and splunkd.log. I am using Splunk 6.0.5.

Note: I am able to receive the scheduled saved search results in csv format in my inbox. So my mailserver is working fine.

Below is the snapshot of alert_actions.conf
[default]
hostname =
ttl = 86400
command = sendemail "to=$action.email.to$" "server=$action.email.mailserver{default=localhost}$" "from=$action.email.from{default=splunk@localhost}$" "subject=$action.email.subject{recurse=yes}$" "format=$action.email.format{default=csv}$""sssummary=Saved Search [$name$]: $counttype$($results.count$)" "sslink=$results.url$" "ssquery=$search$" "ssname=$name$" "inline=$action.email.inline{default=False}$" "sendresults=$action.email.sendresults{default=False}$" "sendpdf=$action.email.sendpdf{default=False}$" "pdfview=$action.email.pdfview$" "searchid=$search_id$" "graceful=$graceful{default=True}$" maxinputs="$maxinputs{default=1000}$" maxtime="$action.email.maxtime{default=5m}$"_validate-1 = action.email.sendresults, validate( is_bool('action.email.sendresults'), "Value of argument 'action.email.sendresults' must be a boolean")

[email]
subject = $name$:~:$description$
from = myname@mycompany.com
mailserver = smtprelay.mycompany.com
sendpdf = 1
reportServerEnabled = false
reportServerURL =
reportPaperSize = a4
reportPaperOrientation = portrait
reportIncludeSplunkLogo = 1
sendresults = 1

0 Karma

bpaul_splunk
Splunk Employee
Splunk Employee

In order to send dashboards as PDF files, you need to have the admin_all_objects role assigned to the user. This is referenced in the documentation.

User role configuration to schedule PDF delivery of dashboards

For a user to schedule PDF delivery of dashboards, the user role must contain the following capabilities:
• schedule_search
• admin_all_objects
This capability is required only if the mail host requires log-in credentials.

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...