topic Re: Email alerting doesn't work in Reporting

Email alerting doesn't work

fingolfin — Mon, 27 Feb 2012 16:24:19 GMT

Hello together

I wanted to enable the Mail alerting, and i have also make the steps, from the docs, and i also have reading Problems/Solutions in the Splunkbase. But no assisstance was the solution for my Problem.
I've create an alert with the informations, and i have also edith the systemsettings to the settings for our Company.
But when we still sniffer on the smtpport, there is no output. I have also check the firewall settings and i also have check our mail Server (lotus notes). The connection with telnet, we have also check.

because i have nothing further found to this problem, i ask you, fore some tips or a solution

Thank you

ps. sorry for my bad english, but it is not my native language, and i am still in education.

Re: Email alerting doesn't work

jbsplunk — Mon, 27 Feb 2012 17:02:16 GMT

I provided steps for troubleshooting this in the following Splunk Answers post. This should be useful in making a determination as to what is occurring.

http://splunk-base.splunk.com/answers/32498/how-to-troubleshoot-splunk-email-notification

Basically, you want to ensure the saved search is configured to alert, and that your email settings are correct. Presuming they are, you can check scheduler.log to see if an alert fired, and python.log to see what, if anything, happened with the triggered alert.

Re: Email alerting doesn't work

fingolfin — Tue, 28 Feb 2012 07:27:09 GMT

hello jbsplunk thanks for you answer!
Now i have check the scheduler.log
and i would say this is correct.
But when i am search the python.log, i'm can't finde this file on the splunkpath. I don't know, is this the problem?
regards

Re: Email alerting doesn't work

jbsplunk — Tue, 28 Feb 2012 17:29:22 GMT

Not sure what you are saying here, but you should look for python.log in $SPLUNK_HOME/var/log/splunk/

Re: Email alerting doesn't work

fingolfin — Wed, 29 Feb 2012 17:45:12 GMT

sorry, I meant to say:
that I "phyton.log" could not found,
on the whole server, including the folder "$ SPLUNK_HOME / var / log / splunk /" is not a file called phyton log.

Re: Email alerting doesn't work

jbsplunk — Wed, 29 Feb 2012 17:47:37 GMT

Are you seeing any python errors in splunkd.log? Is python actually installed?

Re: Email alerting doesn't work

fingolfin — Thu, 01 Mar 2012 11:51:30 GMT

No there are no errors in splunkd.log.
If you mean that in the folder Splunk is an Folder Python 2.7, than Yes.

But i have only installed the Splunk-msi not.
Is this python a single installation? Or does it install it with the splunk installation?