topic What capabilities are required for the "sendemail" search command? in Splunk Search

What capabilities are required for the "sendemail" search command?

athoma31 — Mon, 03 Jun 2019 14:44:36 GMT

The ability for many things in Splunk is controlled by capabilities applied to roles/users. In order for a user to utilize the "sendemail" command, what capabilities are necessary for their role to possess?

If there is a chart which contains search commands and the required capabilities that would suffice as well.

Re: What capabilities are required for the "sendemail" search command?

VatsalJagani — Tue, 04 Jun 2019 13:32:55 GMT

Hi @athoma31,

All users can access sendemail from all apps. And this applies to most of the internal commands.

For proof check command permission here - Settings > Advanced Search > Search Commands > Search for "sendemail" > Permissions.

Hope this helps!!!

Re: What capabilities are required for the "sendemail" search command?

woodcock — Wed, 12 Jun 2019 22:29:55 GMT

The only requirement is that you configure Settings -> Server settings -> Email settings.

Re: What capabilities are required for the "sendemail" search command?

rigor0_0 — Mon, 17 Nov 2025 12:44:44 GMT

Old Thread, but "list_settings" capability is required "allows a role to view server and introspection settings, such as server name and log levels. It is required for users who need to send email notifications via the sendemail"