topic Re: sendmail command throwing error and NO email is getting triggered in Reporting

sendmail command throwing error and NO email is getting triggered

pkumar9610 — Tue, 08 Sep 2020 20:30:33 GMT

HI Friends,

I am using below command to check the email alerts but its throwing error and not able to send emails. Can you please help here

Command: index=123 info | sendemail to="kumar@xxx.com" subject=AzureTestAlert from="splunk"

Error on UI: command="sendemail", [Errno -2] Name or service not known while sending mail to: kumar@xxx.com

Error in python.log:

2020-09-03 17:25:24,113 -0700 ERROR sendemail:143 - Sending email. subject="Splunk Alert: testAlert", results_link="https://splunk-shc-splunk-search-head-0:8000/app/search/@go?sid=scheduler__admin__search__testAlert_at_1599179100_51_CC555C75-B9DE-43D9-93D3-D1C60A6059CF", recipients="[u'kumar@xxx.com']", server="localhost"

Re: sendmail command throwing error and NO email is getting triggered

isoutamo — Tue, 08 Sep 2020 20:49:34 GMT

Is this working earlier or is this first time when you are trying it? Can you change from=splunk@your.doma.in?
r. Ismo

Re: sendmail command throwing error and NO email is getting triggered

pkumar9610 — Tue, 08 Sep 2020 21:20:23 GMT

First time, this is new Splunk cluster setup on AKS using Splunk Operator

Re: sendmail command throwing error and NO email is getting triggered

isoutamo — Wed, 09 Sep 2020 06:44:55 GMT

Ok. Then the configuration is quite probably somehow broken.

Basically you should define the next to alert_actions.conf:

[default] hostname = https://YOUR.SPLUNK.URL:PORT mailserver = YOUR.MAIL.SERVER:PORT use_ssl = 0 use_tls = 0 from = splunk@YOUR.MAIL.DOMAIN

Use_ssl & use_tls based on what your mail server is needing and also password for that user if needed.

r. Ismo