topic Re: Splunk 6.6.0 (SMTP Requirement) in Alerting

Splunk 6.6.0 (SMTP Requirement)

muhammadamir — Mon, 23 Jul 2018 15:04:07 GMT

Hello Support,
I have changed my local SMTP server, & it is running on a windows 2012 R2 server. I changed the settings of SMTP in splunk to point to the new windows based (SMTP), server but it is no longer sending me alerts, I need to make splunk send me alerts using our new SMTP server, Is there anything, Im missing? Please, someone reply ASAP, as it urgent! Also, how can I send a quick test alert, so I can check it is actually working from splunk?

Re: Splunk 6.6.0 (SMTP Requirement)

sudosplunk — Mon, 23 Jul 2018 20:01:47 GMT

Hello muhammadamir,

It is hard to figure out the issue without looking at your settings. However, to test email alerts, you can use "sendmail" search command.

Re: Splunk 6.6.0 (SMTP Requirement)

MuS — Mon, 23 Jul 2018 20:40:21 GMT

small correction here, the command is sendemail http://docs.splunk.com/Documentation/Splunk/6.6.0/SearchReference/Sendemail

And as usual check index=_internal sourcetype=splunkd for that host and see if you find any errors related to smtp.

cheers, MuS