sendmail to multiple users based on table output

harryvdtol — Wed, 19 Nov 2025 06:25:03 GMT

Hello,

I want to send multiple mails, based on the data in the seearch results.
I have tried many posts, but i am still unable to get this working.

For each email address i want to send an email.
In my example i want to send 2 emails.

This is my query example

The result is, that i a getting 5 emails, with a content of only kol1 as message

I am thinking of alternatives, but that looks to complicated for now , like this...
https://community.splunk.com/t5/Splunk-Cloud-Platform/Send-email-to-multiple-users-with-respective-data-based-on-the/m-p/704718

Is it somehow possible to do get this working?

Regards,

Harry

Re: sendmail to multiple users based on table output

harryvdtol — Wed, 19 Nov 2025 13:52:19 GMT

I am going to do it in two steps
Make an outputlookup for the data.
And with another search inputlookup and this commanmd

| inputlookup mytempdata.csv | stats values(email) as email | mvexpand email | map search=" | inputlookup mytempdata.csv | where match(email, \"^$email$\") | sendemail to=\"$email$\" subject=\"My Subject\" message=\"My Message\" sendresults=true inline=true format=table sendpdf=false sendcsv=false " maxsearches=100

Re: sendmail to multiple users based on table output

harryvdtol — Wed, 19 Nov 2025 13:52:55 GMT

And it works

topic sendmail to multiple users based on table output in Reporting

sendmail to multiple users based on table output

Re: sendmail to multiple users based on table output

Re: sendmail to multiple users based on table output