topic Re: Why do I receive an "Unauthenticated senders not allowed" error when trying to send emails from Splunk? in Reporting

Why do I receive an "Unauthenticated senders not allowed" error when trying to send emails from Splunk?

mattstibbs — Mon, 22 May 2017 11:00:52 GMT

I am having trouble sending emails from Splunk. My colleague can send them without an issue, however when I try to send them I get the following error:

command="sendemail", (550, 'Unauthenticated senders not allowed', u'splunk@aaa.bbb.uk') while sending mail to: xxx.yyy@zzz.net

I am a power user and we can't find any other settings that would be preventing me from sending that differ to his (which work).

What are we missing?

Re: Why do I receive an "Unauthenticated senders not allowed" error when trying to send emails from Splunk?

adonio — Mon, 22 May 2017 13:52:57 GMT

does your colleague uses the same splunk instance?

Re: Why do I receive an "Unauthenticated senders not allowed" error when trying to send emails from Splunk?

jcrabb_splunk — Mon, 22 May 2017 15:04:03 GMT

You are getting a 550 SMTP error from your mail system (not Splunk). I would check the mail system you are pointed at when you try to send the message to determine the issue. Based on the message, the sending address may not be permitted to relay or to send to that recipient. It could also mean the address is not valid. Again, I would check the logs on the mail host at the time the message was sent to better troubleshoot the issue.

Re: Why do I receive an "Unauthenticated senders not allowed" error when trying to send emails from Splunk?

mattstibbs — Mon, 22 May 2017 16:06:51 GMT

yes - exactly the same

Re: Why do I receive an "Unauthenticated senders not allowed" error when trying to send emails from Splunk?

mattstibbs — Tue, 29 Sep 2020 14:10:14 GMT

Thank you - we are using the generic configured email settings so I am ruling out there being any difference in settings between his use and mine.

I did find an article that suggested it might be because i don't have admin_all_objects permission - but that seems overkill just to send an email....