Reporting

Receving error ssLink or sessionKey when trying to assess PDF function under Enterprise Security App.

rsimmons
Splunk Employee
Splunk Employee

Issue with assessing PDF function under Enterprise Security App. The error that is being recevied is sessionkey or sslink is unavailable than throw the following error message and go no further.

error "Can't attach PDF - either ssLink or sessionKey unavailable".

Tags (1)
1 Solution

rsimmons
Splunk Employee
Splunk Employee

Go under file /etc/systems/local/alert_actions.conf:

Modify the parameter under email by adding "sslink=$results.url$" :

[email]
command = $action.email.preprocess_results{default=""}$
"sslink=$results.url$"

You should start to receive your PDF's.

View solution in original post

rsimmons
Splunk Employee
Splunk Employee

Go under file /etc/systems/local/alert_actions.conf:

Modify the parameter under email by adding "sslink=$results.url$" :

[email]
command = $action.email.preprocess_results{default=""}$
"sslink=$results.url$"

You should start to receive your PDF's.

sloshburch
Splunk Employee
Splunk Employee

Same - I have same issue and my alert_actions already has this.

0 Karma

kogane
Path Finder

Is this right? My [email] command setting already has that, along with a ton of other parameters.

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...