I have a dashboard which loads a bunch of scheduled reports. This dashboard is emailed to me via pdf at 6 pm everyday. The dashboard loads/works fine, however, the pdf doesn't show all the panels.
The first panel **displays correctly**:
Here is the search:
index=_internal source=*license_usage.log* type=Usage earliest=@d-6h latest=@d+18h | fields b,idx,_time | timechart span=1h sum(b) by idx | foreach * [eval <>='<>'/1024/1024/1024]
The Second panel **doesn't display at all, with no error.** It's just blank.
Here is the search:
index=_internal source=*license_usage.log* type=Usage earliest=@d-6h latest=@d+18h | fields b,idx,_time | timechart span=1h sum(b) by idx | addcoltotals | fillnull value=TOTAL | search _time=TOTAL | foreach * [eval <>='<>'/1024/1024/1024]
The final panel **has the following error**: "year=1 is before 1900; the datetime strftime() methods require year >= 1900"
Here is the search:
index=_internal source=*license_usage.log* type=Usage earliest=@d-6h latest=@d+18h | fields b,idx,_time | timechart span=1h sum(b) by idx | addcoltotals | fillnull value=TOTAL | foreach * [eval <>='<>'/1024/1024/1024]
What is making the last two panels fail to render via the scheduled pdf?
↧