topic Re: Unable to schedule report using sendmail in Reporting

Unable to schedule report using sendmail

Navanitha — Thu, 07 May 2015 13:11:28 GMT

My sendmail search is working fine in GUI but when i try to schedule a report with sendmail in my search query, I am not getting any email.
Can someone guide me to fix this?

Thanks,

Re: Unable to schedule report using sendmail

srinathd — Thu, 07 May 2015 13:19:34 GMT

Can you post your query here. It will help.

Re: Unable to schedule report using sendmail

Navanitha — Thu, 07 May 2015 13:57:16 GMT

index=prod_ironport "client@z.com" "ready" "MID"|stats count | sendemail to="xxx@z.com" from=yyy@z.com cc=www.@z.com format= text inline= true sendresults=true server="our server name"

looks something like this..replaced with dummy mails ids 😉

Re: Unable to schedule report using sendmail

srinathd — Tue, 12 May 2015 13:03:47 GMT

when you save your search query "index=prod_ironport "client@z.com" "ready" "MID"|stats count" as a saved search, you can also schedule email alert. you can edit email settings and provide the mail id's there instead of giving them in the search query.

Re: Unable to schedule report using sendmail

srinathd — Tue, 12 May 2015 13:05:24 GMT

Sendmail command works only in search bar of splunk. check this link http://docs.splunk.com/Documentation/Splunk/6.2.3/Alert/Setupalertactions#Configure_email_notification_settings

Re: Unable to schedule report using sendmail

Navanitha — Tue, 12 May 2015 13:22:09 GMT

yes I can schedule the email alerts but here my requirement is to change the from address for this particular project. If i have to schedule the email and change the from address in my scrip, that would effect all the email which I don't want. for only this particular query I want the results to be sent with a different from address. Hence I am trying to use "sendmail". Hope you understood my requirement.