Alerting

Error sending emails

Koroshi
Observer
I am currently trying to set up a no reply office 365 smtp email address.

When I go to test this and send and email using the following:

index=_internal source=*python.log
| head 1
| sendemail to=[email protected] sendresults=true server=smtp.office365.com:587

I get the following error:
command="sendemail", (554, '5.2.0 STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied; Failed to process message due to a permanent exception with message Cannot submit message.

Any suggestions or trouble steps on this would be greatly appreciated.

Thanks
Koroshi

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

SMTP reply code 554 means that your mail server is not accepting your email to relay (send) to another receiver. You must ask your mail administrator that they add your splunk host to allowed sender/relaying list. 
r. Ismo

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

  Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register   On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...