<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Sendemail not working in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/Sendemail-not-working/m-p/563152#M12895</link>
    <description>&lt;P&gt;&lt;SPAN&gt;I also got the "Application-specific password required" error when attempting to use my gmail as my email server.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;As I had 2nd factor turned on, I found that I needed to set a separate app-specific password. After discovering this existed, this is how I'd want to do it anyway, even without being forced to. That way, I don't have to put my password that I use day to day for google into the splunk settings.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;You can set an app password via&amp;nbsp;&lt;A href="https://myaccount.google.com/apppasswords" target="_blank"&gt;https://myaccount.google.com/apppasswords&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Here is the help if you need further information.&amp;nbsp;&lt;A href="https://support.google.com/accounts/answer/185833?hl=en" target="_blank"&gt;https://support.google.com/accounts/answer/185833?hl=en&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 13 Aug 2021 07:29:40 GMT</pubDate>
    <dc:creator>00willo</dc:creator>
    <dc:date>2021-08-13T07:29:40Z</dc:date>
    <item>
      <title>Sendemail not working</title>
      <link>https://community.splunk.com/t5/Alerting/Sendemail-not-working/m-p/538262#M10181</link>
      <description>&lt;UL&gt;&lt;LI&gt;&lt;SPAN&gt;I have configured email settings as below&lt;/SPAN&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;OL&gt;&lt;LI&gt;&lt;SPAN&gt;smtp.gmail.com:587 with&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN&gt;TLS selected&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN&gt;username - email&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN&gt;password&lt;/SPAN&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;SPAN&gt;Search queries I have tried as below:&lt;/SPAN&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;SPAN&gt;1) index=_internal | head 5 | sendemail to="&amp;lt;myemail&amp;gt;" server=smtp.gmail.com subject="Here is an email from Splunk" message="This is an example message" sendresults=true&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;2) index=_internal&lt;BR /&gt;| head 5&lt;BR /&gt;| sendemail to="&amp;lt;myemail&amp;gt;" server=smtp.gmail.com:587 subject="Here is an email from Splunk" message="This is an example message" sendresults=true&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;SPAN&gt;ERROR: command="sendemail", (530, b'5.7.0 Authentication Required. Learn more at\n5.7.0 &lt;A href="https://support.google.com/mail/?p=WantAuthError" target="_blank"&gt;https://support.google.com/mail/?p=WantAuthError&lt;/A&gt; - gsmtp',&lt;/SPAN&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;3)index=_internal&lt;BR /&gt;| head 5&lt;BR /&gt;| sendemail to="&amp;lt;myemail&amp;gt;" server=smtp.gmail.com:587 use_tls=1 subject="Here is an email from Splunk" message="This is an example message" sendresults=true&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;4)index=_internal&lt;BR /&gt;| head 5&lt;BR /&gt;| sendemail to="&amp;lt;myemail&amp;gt;" subject="Here is an email from Splunk" message="This is an example message" sendresults=true&lt;/SPAN&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;ERROR:&amp;nbsp;command="sendemail", (534, b'5.7.9 Application-specific password required. Learn more at\n5.7.9 &lt;A href="https://support.google.com/mail/?p=InvalidSecondFactor" target="_blank"&gt;https://support.google.com/mail/?p=InvalidSecondFactor&amp;nbsp;&lt;SPAN&gt;- gsmtp')&lt;/SPAN&gt;&lt;/A&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;I have also tried after disabling less secure access apps.&lt;/LI&gt;&lt;LI&gt;Search Query is not even trying to log in I think.&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Any help is appreciated thanks.&lt;/P&gt;</description>
      <pubDate>Tue, 02 Feb 2021 11:00:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Sendemail-not-working/m-p/538262#M10181</guid>
      <dc:creator>khilanm</dc:creator>
      <dc:date>2021-02-02T11:00:40Z</dc:date>
    </item>
    <item>
      <title>Re: Sendemail not working</title>
      <link>https://community.splunk.com/t5/Alerting/Sendemail-not-working/m-p/563152#M12895</link>
      <description>&lt;P&gt;&lt;SPAN&gt;I also got the "Application-specific password required" error when attempting to use my gmail as my email server.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;As I had 2nd factor turned on, I found that I needed to set a separate app-specific password. After discovering this existed, this is how I'd want to do it anyway, even without being forced to. That way, I don't have to put my password that I use day to day for google into the splunk settings.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;You can set an app password via&amp;nbsp;&lt;A href="https://myaccount.google.com/apppasswords" target="_blank"&gt;https://myaccount.google.com/apppasswords&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Here is the help if you need further information.&amp;nbsp;&lt;A href="https://support.google.com/accounts/answer/185833?hl=en" target="_blank"&gt;https://support.google.com/accounts/answer/185833?hl=en&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 13 Aug 2021 07:29:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Sendemail-not-working/m-p/563152#M12895</guid>
      <dc:creator>00willo</dc:creator>
      <dc:date>2021-08-13T07:29:40Z</dc:date>
    </item>
  </channel>
</rss>

