topic Re: Emails from Splunk stopped working overnight in Reporting

Emails from Splunk stopped working overnight

walkerhound — Fri, 12 Jun 2020 16:06:55 GMT

We have an email set to run on a schedule from a dashboard. It worked yesterday but not today. I can see in the log where the email is sending. I tested by changing the scheduled time and again, it says the email is sending, but it does not arrive.

Another email that comes from a scheduled report but it did not arrive today either.

Re: Emails from Splunk stopped working overnight

richgalloway — Fri, 12 Jun 2020 18:20:49 GMT

Check splunkd.log and python.log for errors sending email. If those logs indicate success, then the problem is with your mail system.

Re: Emails from Splunk stopped working overnight

walkerhound — Fri, 12 Jun 2020 19:07:40 GMT

I am able to send email using telnet to the smtp server port 25 from our Splunk server, so it doesn't seem as if it's our mail server.

On the other hand, I don't see errors in the log files. The last message I see says it's sending email. It has the correct information about recipients and smtp server. Should I see any more messages in the logs after that?

Thank you for your help.

Re: Emails from Splunk stopped working overnight

richgalloway — Sat, 13 Jun 2020 00:39:19 GMT

Sending email using telnet is not the same as Splunk sending email since you don't know all of the settings Splunk will use. It's a good test of connectivity, but that's about it.
If you see no error messages in the logs then see if your mail admin can shed some light on the problem. BTW, people are checking their spam folders, right?

Re: Emails from Splunk stopped working overnight

walkerhound — Tue, 16 Jun 2020 11:35:54 GMT

Still not working. Spam folder is not the issue.