https://community.splunk.com/t5/Alerting/Why-did-email-alerts-stop-sending-after-upgrading-to-Splunk-6-1/m-p/192337#M3291 <P>To update everyone on what the solution was for us.</P> <P>During the upgrade from 5 to 6.1 the sendemail.py wasn't upgraded.</P> <P>The sendemail.py from the github link above wasn't the incorrect one therefore didn't fix it.</P> <P>I did a stand alone fresh install of v6.1.4 to my laptop, grabbed the sendmail.py from there and copied it to our Splunk server.</P> <P>Emails are now sending.</P> Wed, 28 Jan 2015 16:05:00 GMT EdSabine 2015-01-28T16:05:00Z https://community.splunk.com/t5/Alerting/Why-did-email-alerts-stop-sending-after-upgrading-to-Splunk-6-1/m-p/192336#M3290 <P>After upgrading to 6.1, our email alerts have stopped sending.</P> <P>In the splunkd.log I'm getting the following line</P> <PRE><CODE>01-13-2015 07:25:06.258 -0500 ERROR ScriptRunner - stderr from 'C:\Program Files\Splunk\bin\PYTHON.EXE C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py "results_link=https://splunk.secureiq.ca:8000/app/search/@go?sid=scheduler__admin__search__RMD50a13d0b190b0c032_at_1421151900_1351" "ssname=Alert: Error Message from Windows Application Event Log" "graceful=True" "trigger_time=1421151905" results_file="C:\\Program Files\\Splunk\\var\\run\\splunk\\dispatch\\scheduler__admin__search__RMD50a13d0b190b0c032_at_1421151900_1351\\results.csv.gz"': ERROR:root:missing required argument: to. Please specify at least on email recipient as: "to=address@example.com" </CODE></PRE> <P>I've tried putting the email info in the Alerts Search string, and emails are sent, however the alerts are triggered on a Cron schedule every 5 mins, so each alert sends an email every 5 mins whether there's anything to report or not.</P> <P>I've also tried replacing sendemail.py and sendemail_handler.py with those below and restarting Splunk....<BR /> <A href="https://github.com/edo17/splunk/blob/master/etc/apps/search/bin/sendemail.py" target="_blank">https://github.com/edo17/splunk/blob/master/etc/apps/search/bin/sendemail.py</A><BR /> <A href="https://github.com/edo17/splunk/blob/master/etc/apps/search/bin/sendemail_handler.py" target="_blank">https://github.com/edo17/splunk/blob/master/etc/apps/search/bin/sendemail_handler.py</A></P> <P>Am still getting the same error in the log.</P> <P>Can anyone help with this?</P> Mon, 28 Sep 2020 18:40:58 GMT https://community.splunk.com/t5/Alerting/Why-did-email-alerts-stop-sending-after-upgrading-to-Splunk-6-1/m-p/192336#M3290 EdSabine 2020-09-28T18:40:58Z https://community.splunk.com/t5/Alerting/Why-did-email-alerts-stop-sending-after-upgrading-to-Splunk-6-1/m-p/192337#M3291 <P>To update everyone on what the solution was for us.</P> <P>During the upgrade from 5 to 6.1 the sendemail.py wasn't upgraded.</P> <P>The sendemail.py from the github link above wasn't the incorrect one therefore didn't fix it.</P> <P>I did a stand alone fresh install of v6.1.4 to my laptop, grabbed the sendmail.py from there and copied it to our Splunk server.</P> <P>Emails are now sending.</P> Wed, 28 Jan 2015 16:05:00 GMT https://community.splunk.com/t5/Alerting/Why-did-email-alerts-stop-sending-after-upgrading-to-Splunk-6-1/m-p/192337#M3291 EdSabine 2015-01-28T16:05:00Z