topic Test Email in Splunk in Reporting

Test Email in Splunk

splunktp — Wed, 27 Jul 2011 06:16:15 GMT

Hi Guys,

Is it possible in Splunk (web or cli) to send a test email just to immediately check if the email alert notification is working or not?

Thanks

Re: Test Email in Splunk

gooza — Wed, 27 Jul 2011 07:09:23 GMT

I tested my email notification by creating a small schedule search with alert condition of always that sends email.

Re: Test Email in Splunk

petercow — Wed, 28 Aug 2013 13:26:16 GMT

There isn't. I filed an enhancement request more than a year ago on this.

Re: Test Email in Splunk

dglinder — Fri, 14 Mar 2014 14:51:42 GMT

Until Splunk developers add a "test email" link on the email configuration page, here's a quick way to test your email settings in Splunk.

From the default "Search" home page (the "live dashboard") in version 5.X and earlier, just above the search bar is the "Actions" drop-down menu. Under there choose the "Schedule PDF Delivery..." option. Fill in the "Deliver To" field with your address, then click the "Send Test Email" link at the bottom of that window. Click "Cancel" to exit this window.

In version 6.X I couldn't find the same actions option, but you should be able to use the "sendmail" search command:

* | top 5 host | sendemail to="YourAccount@example.com"

But in my test system this wasn't actually sending an email, even when I added the server= fields to point to my MTA.

Re: Test Email in Splunk

mcronkrite — Tue, 23 Sep 2014 18:46:34 GMT

index=_internal | head 1 | sendemail to="name@my.email.domain" format="html" server=smtp.gmail.com:587 use_tls=1

Re: Test Email in Splunk

bohanlon_splunk — Wed, 01 Feb 2017 15:14:40 GMT

As per: http://docs.splunk.com/Documentation/Splunk/latest/Alert/Emailnotification

You can send email notifications directly from the sendemail search command. Here is an example:
index=main | head 5 | sendemail to= server= subject="Here is an email notification" message="This is an example message" sendresults=true inline=true format=raw sendpdf=true

Re: Test Email in Splunk

evana007 — Fri, 20 Jul 2018 21:30:32 GMT

If you are a new user, then it may not work, or there may be no option for sending the test mail. You may send test mail after verifying the information. please visit Gmail Support USA for more information.