Reporting

PDF Error message - User has no data in his PDF Report

rsimmons
Splunk Employee
Splunk Employee

Error message from users python.log:

2010-04-23 16:30:12,102 INFO xvfb:115 - Starting X Server: ['/usr/bin/Xvfb', ':5', '-screen', '0', '3000x768x24', '-nolisten', 'tcp'] 2010-04-23 16:30:12,102 INFO Starting X Server: ['/usr/bin/Xvfb', ':5', '-screen', '0', '3000x768x24', '-nolisten', 'tcp']

Tags (1)
1 Solution

rsimmons
Splunk Employee
Splunk Employee

Ensure that the Xvfb X server and xauth for your Linux distribution is installed. This is included with most Linux distributions, but not installed by default. You won't get anything in your PDF report unless this part is setup on the server.

  • On Redhat/CentOS/Fedora, type: yum install Xvfb xauth (note the capital X for Xvfb.)
  • On Debian/Ubuntu, type: apt-get install xvfb xauth

View solution in original post

rsimmons
Splunk Employee
Splunk Employee

Ensure that the Xvfb X server and xauth for your Linux distribution is installed. This is included with most Linux distributions, but not installed by default. You won't get anything in your PDF report unless this part is setup on the server.

  • On Redhat/CentOS/Fedora, type: yum install Xvfb xauth (note the capital X for Xvfb.)
  • On Debian/Ubuntu, type: apt-get install xvfb xauth
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...