topic Re: How to configure email alert using gmail smtp? in Alerting

How to configure email alert using gmail smtp?

melonman — Thu, 19 Jan 2012 02:49:27 GMT

I was trying to configure email alert to deliver scheduled saved search result.
The SMTP server I was trying to use is gmail SMTP.

The configuration in Email alert settings -> Mail Server Settings is:

Mail Host -> smtp.gmail.com:465
# Enable SSL checked

Username -> @gmai.com
Password ->
...

Is there any misconfiguration or limitation of SMTP server?
Does anyone know how to use gmail SMTP with splunk email alering?

Thank you!

Re: How to configure email alert using gmail smtp?

itinney — Mon, 28 Sep 2020 10:19:59 GMT

Hi,
What works for me is to use port 587 and use TLS in place of SSL.

If you try to test using the "sendemail" search command then I found that it does not seem to pick up every setting from alert_actions.conf file so I had to specify some of them for it to start working. This includes the undocumented argument "use_tls" which you can find in the sendemail.py script.

The following search worked for me and I then used these settings in alert_actions.conf (configured through the UI):
index=_internal | head 1 | sendemail to="name@my.email.domain" format="html" server=smtp.gmail.com:587 use_tls=1

Re: How to configure email alert using gmail smtp?

itinney — Thu, 19 Jan 2012 10:50:10 GMT

Oh and when you test the Scheduled Alert, don't forget to disable it so you don't get 50 alert emails in your inbox 😉

Re: How to configure email alert using gmail smtp?

melonman — Fri, 20 Jan 2012 07:20:59 GMT

Thanks for answers and tips!

Re: How to configure email alert using gmail smtp?

ashish_test — Mon, 28 Oct 2013 13:46:11 GMT

Hi, I'm getting error as "command="sendemail", [Errno 11001] getaddrinfo failed while sending mail to: xxxx.xxxx@gmail.com.
I'hv faced to same error [Errno 11001] while testing integration with servicenow with the help of servicenow app. I think there is something wrong with my system settings? Can you please help.

Python log shows below error-
2013-10-28 19:06:29,036 DEBUG Preloading from 'C:\Program Files\Splunk\var\run\splunk\merged\web.conf'.
2013-10-28 19:06:29,038 DEBUG simpleRequest > GET https://127.0.0.1:8089/servicesNS/nobody/search/admin/alert_actions/email [] sessionSource=direct
2013-10-28 19:06:29,448 DEBUG simpleRequest < server responded status=200 responseTime=0.4110s
2013-10-28 19:06:29,457 ERROR Sending email. subject="Splunk Results", results_link="None", recipients="['XXXX.XXXXx@gmail.com']"

Re: How to configure email alert using gmail smtp?

himynamesdave — Fri, 30 May 2014 10:58:09 GMT

Here's a step by step walkthrough of configuring Splunk to work with Gmail SMTP.

Re: How to configure email alert using gmail smtp?

sherm77 — Tue, 23 Jun 2015 17:27:45 GMT

@himynamesdave the link you gave has moved to: http://blogs.splunk.com/2014/06/27/splunk-alerts-using-gmail-twitter-phone-calls-and-much-more/

Re: How to configure email alert using gmail smtp?

himynamesdave — Tue, 23 Jun 2015 18:08:40 GMT

@sherm77 kudos coming your way!

Re: How to configure email alert using gmail smtp?

saurabh_tek — Thu, 29 Sep 2016 05:32:52 GMT

Thanks @himynamesdave for sharing the updated link