topic What capabilities are needed to run sendemail command? in Reporting

What capabilities are needed to run sendemail command?

chrishartsock — Wed, 18 Oct 2017 12:33:16 GMT

Hello all,

Certain users in our environment seem to be able to run searches utilizing the "sendemail" command while others cannot. I am assuming this due to differing capabilities assigned to their roles. Does anyone know what capability(s) are required to run "sendemail"?

Thanks,
Chris

Re: What capabilities are needed to run sendemail command?

hardikJsheth — Wed, 18 Oct 2017 13:50:46 GMT

To run |sendmail command you need "search" capability.

Re: What capabilities are needed to run sendemail command?

chrishartsock — Wed, 18 Oct 2017 13:55:47 GMT

Okay. Is that the only capability that is needed? If that is the case, then capabilities are not our issue.

Re: What capabilities are needed to run sendemail command?

chrishartsock — Thu, 19 Oct 2017 16:04:18 GMT

I did some more digging and it appears that the affected users were getting the following error:
2017-10-18 15:57:21,405 -0400 ERROR sendemail:452 - 'rootCAPath' while sending mail to: xxxxxx@buttercupgames.com

This led me to this question:
https://answers.splunk.com/answers/528832/e-mail-alerts-stopped-working-since-66-upgrade-for.html

As specified, I added the 'list_settings' capability to the role and it fixed the issue.

Re: What capabilities are needed to run sendemail command?

kamaljagga — Thu, 10 Sep 2020 20:37:47 GMT

We had upgraded from 7.2.6 to 8.0.5 recently and Adding the role list_Settings didn't work. Kindly advise.

Re: What capabilities are needed to run sendemail command?

computermathguy — Wed, 10 Dec 2025 21:15:12 GMT

We were getting a "command=sendmail, rootCAPath while sending mail to ..." message for users other than admins.

Adding the 'list_settings' capability fixed it.

Thanks