topic Re: ERROR Sending email with sendemail, but alert emails work fine in Getting Data In

ERROR Sending email with sendemail, but alert emails work fine

ftk — Wed, 28 Jul 2010 21:43:27 GMT

I have my smtp server configured correctly and have setup and do receive plenty of alerts for scheduled searches. However when I attempt to use the sendemail command, the following error is displayed:

[Errno 10061] No connection could be made because the target machine actively refused it while sending mail to: foo@bar.com

The only error I can find in the logs is from var/log/python.log:

2010-07-28 10:18:51,105 ERROR Sending email. subject="Splunk Results", results_link="None", recepients="['foo@bar.comm']"

I haven't been able to find any other errors related to this, and this is the only line in python.log.

I am using sendemail as follows:

my search terms | sendemail to=foo@bar.com sendresults=true

Windows Installation, 4.1.3. What am I doing wrong?

Re: ERROR Sending email with sendemail, but alert emails work fine

ftk — Wed, 28 Jul 2010 21:45:09 GMT

The sendemail command by default attempts to use localhost as the SMTP server and ignores the settings used for scheduled search alerts. If you do not have an SMTP server or forwarder installed (which on Windows is quite likely), sendemail will fail when trying to connect to localhost.

To work around this, specify server in sendemail as follows:

my search terms | sendemail to=foo@bar.com sendresults=true server=mail.bar.com

Re: ERROR Sending email with sendemail, but alert emails work fine

hiteshkanchan — Wed, 30 May 2012 11:41:30 GMT

I tried this this command and it gives the error like "command="sendemail", Connection unexpectedly closed while sending mail to: user@domain.com

Re: ERROR Sending email with sendemail, but alert emails work fine

cli — Tue, 16 Oct 2012 23:17:31 GMT

Same here as hiteshkanchan. Does not seem Splunk can actually send out emails from command.

Re: ERROR Sending email with sendemail, but alert emails work fine

daniel_splunk — Mon, 29 Oct 2012 09:40:49 GMT

If your email server enabled the ssl or tls, you need to use the following syntax.

For tls enabled mail server:
| sendemail from= to= server=":" use_tls=true username= password= sendresults=true

For ssl enabled mail server:
| sendemail from= to= server=":" use_ssl=true username= password= sendresults=true

Re: ERROR Sending email with sendemail, but alert emails work fine

doconnorMHS — Fri, 11 Apr 2014 13:59:54 GMT

This worked for me. Wasted over an hour on this!

Re: ERROR Sending email with sendemail, but alert emails work fine

etrailer — Thu, 07 Jan 2016 21:05:01 GMT

Adding the server= command worked for me also. Wasn't aware that the command line would ignore the server wide email settings.

Re: ERROR Sending email with sendemail, but alert emails work fine

ben363 — Mon, 21 Mar 2016 00:07:37 GMT

For some reason, sendemail.py doesn't use the same parameters as scheduled search.

Setting the server parameters in the GUI (Settings->Server Settings->Email Settings) will get scheduled search to work, but not sendemail.

Saved searches look in users/XXX/search/loca/savedsearches.conf, and then in ./system/local/alert_actions.conf

sendemail from the command line doesn't. Or doesn't seem to. Maybe it does but the configured parameters are being overridden by empty strings from the command line?

Either way, if you don't want to always be typing server=XXX on the command line, one option is to edit sendemail.py and hardcode your server config:

For eg:

Instead of:

server     = ssContent.get('action.email.mailserver', 'localhost')

Use:

server     = ssContent.get('action.email.mailserver', 'yourhost')

Re: ERROR Sending email with sendemail, but alert emails work fine

jitendra0101 — Wed, 07 Jun 2017 07:01:43 GMT

It is not working for me. Please help me brother.

Re: ERROR Sending email with sendemail, but alert emails work fine

kollachandra — Mon, 12 Mar 2018 20:18:29 GMT

I am getting the following error

command="sendemail", 'rootCAPath' while sending mail to: *****