topic How do you enable email alerts in the trial version of Splunk Enterprise? in Alerting

How do you enable email alerts in the trial version of Splunk Enterprise?

sureshkrovi — Thu, 15 Nov 2018 23:44:54 GMT

Hi ,

Just wanted to check if there is a way to get email alerts enabled in the Splunk Enterprise trial version. I see emails are not getting triggered and I wanted to check if this could be done in any other way.

Thanks,

Re: How do you enable email alerts in the trial version of Splunk Enterprise?

Shan — Fri, 16 Nov 2018 08:55:05 GMT

@sureshkrovi,

Splunk enterprise trial version is enabled with alert option. Sure you can able to send email alert. Can you please let me know what is the error your getting ..

Thanks ..

Re: How do you enable email alerts in the trial version of Splunk Enterprise?

sureshkrovi — Fri, 16 Nov 2018 20:50:09 GMT

I don't think I've errors,It just not sending email.Here are the configurations if it helps.Please note that I can see notifications if I switched alert type and believe that endorse issue with email trigger.Please let me know if you need more details.
Enabled:
Yes. Disable
App:
search
Permissions:
Shared Globally. Owned by admin. Edit
Modified:
Nov 16, 2018 12:44:30 PM
Alert Type:
Scheduled. Hourly, at 45 minutes past the hour. Edit
Trigger Condition:
Number of Results is > 0. Edit
Actions:
1 Action
Alert iconSend email
Edit

Re: How do you enable email alerts in the trial version of Splunk Enterprise?

adonio — Sun, 18 Nov 2018 22:53:05 GMT

did you connect your splunk to a mail server?
http://docs.splunk.com/Documentation/Splunk/7.2.1/Alert/Emailnotification

Re: How do you enable email alerts in the trial version of Splunk Enterprise?

vinkumar_splunk — Tue, 20 Nov 2018 10:00:53 GMT

I guess you didn't set up the email configuration, go through the below link and configure it:

http://docs.splunk.com/Documentation/Splunk/7.2.1/Alert/Emailnotification

If you're still facing the issue, then look for python.log under splunk_home/var/log/splunk dir, which contains information about it. Look for "sendemail"

Re: How do you enable email alerts in the trial version of Splunk Enterprise?

sureshkrovi — Tue, 27 Nov 2018 00:26:58 GMT

Thanks you for pointing out .I've realized some steps to be taken when I used open source smtp servers that blocks messages by stating less secured application are blocked to use smtp server.All good once I enabled access to splunk