topic Re: How can I find out which email server Splunk uses? in Other Usage

How can I find out which email server Splunk uses?

ddrillic — Tue, 10 Oct 2017 18:24:40 GMT

Where can I find which email server Splunk uses? An advanced user is asking ; - )

treinke — Tue, 10 Oct 2017 18:49:49 GMT

If you have access to your internal index. You can try the following:

index=_internal source="*/python.log" "Sending email"

You should see a field called server.

server="localhost"

MuS — Tue, 10 Oct 2017 19:13:55 GMT

Hi dddillic,

If you want to see the config for the mail server you can use either of these commands:

|  rest /services/configs/conf-alert_actions/email 
|  table mailserver

$SPLUNK_HOME/splunk btool alert_actions list email

and look for the mailserver option.

Hope this helps ...

cheers, MuS

ddrillic — Tue, 10 Oct 2017 19:31:47 GMT

Perfect. It's all localhost -

ddrillic — Tue, 10 Oct 2017 19:40:59 GMT

Thank you!

jaihingorani — Fri, 03 Dec 2021 13:24:35 GMT

what is behind localhost ? is it the relayhost which is setup under postfix configuration ?