How to send email via SSL/TLS using localhost?

jadamsplunk — Wed, 17 Jun 2020 20:42:28 GMT

Hello all,

I am attempting to get my Splunk VM to send email via SSL or TLS using the localhost settings. I want to use localhost because I do not have access to any mail relay (3rd party such as GMAIL, HOTMAIL, etc are out of the question). When I configure Splunk to use SSL/TLS and then I run a simple sendemail test ( index=_audit | head 3 | sendemail to="me@me.com" use_ssl=true / index=_audit | head 3 | sendemail to="me@me.com" use_tls=true) I get the following error:

command="sendemail", [Errno 111] Connection refused while sending mail

The actual intent of this is to successfully send email from localhost using SSL/TLS from a python script I've written as part of an app I'm submitting for approval to Splunk Cloud, which was denied because I was sending email without SSL. It works fine with non-SSL but it fails with localhost settings.

I feel like there may be something fundamental I'm missing.

Re: Sending email via SSL/TLS using localhost

livehybrid — Wed, 10 Jun 2020 21:59:47 GMT

Would it be possible to create a toggle in the settings of your app for SSL, defaulting to *True* but giving you the option to set to False once uploaded?

It does sound a little odd though, If it isnt using SSL when sending to localhost then I'm not sure how they can enforce it for your own app that uses the same mechanism?

It might be worth asking for an escalation through support to see if you can come to an agreement with them.

topic Re: Sending email via SSL/TLS using localhost in Splunk Dev

How to send email via SSL/TLS using localhost?

Re: Sending email via SSL/TLS using localhost