Why can't I send emails via alerting?

simon00 — Wed, 27 Jul 2022 14:23:47 GMT

Hello, I was trying to setup Alerting via emails and it wouldn't work. Alert for sure gets triggered, because other alert_action works (Add to triggered alerts) but the email one didn't.
In "var\log\splunk\python.log" I found out that for every trigger there is error log
Ex.:

2022-07-27 08:30:04,382 +0200 ERROR sendemail:1610 - [HTTP 404] https://127.0.0.1:8089/servicesNS/admin/search/alerts/alert_actions/email?output_mode=json

Traceback (most recent call last):

File "C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 1603, in <module>

results = sendEmail(results, settings, keywords, argvals)

File "C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 193, in sendEmail

responseHeaders, responseBody = simpleRequest(uri, method='GET', getargs={'output_mode':'json'}, sessionKey=sessionKey)

File "C:\Program Files\Splunk\Python-3.7\lib\site-packages\splunk\rest\__init__.py", line 583, in simpleRequest

raise splunk.ResourceNotFound(uri)

splunk.ResourceNotFound: [HTTP 404] https://127.0.0.1:8089/servicesNS/admin/search/alerts/alert_actions/email?output_mode=json

I tried "| sendemail..." and it generates the same error there.
What is supposed to be in the endpoint and how do I fix it?

Re: Why can't I send emails via alerting?

renjith_nair — Thu, 28 Jul 2022 11:06:19 GMT

It's worth to check your email server settings and make sure they are valid servers

Server settings » Email settings

https://docs.splunk.com/Documentation/Splunk/9.0.0/Alert/Emailnotification

Re: Why can't I send emails via alerting?

simon00 — Thu, 28 Jul 2022 12:45:05 GMT

I am confident with my email server settings. I made(edited one I downloaded) custom alert action that consumes those settings and sends emails correctly. This is just workaround though and I am still working on the fix.

topic Re: Why can't I send emails via alerting? in Alerting

Why can't I send emails via alerting?

Re: Why can't I send emails via alerting?

Re: Why can't I send emails via alerting?