Alerting

Error sending emails

Koroshi
Observer
I am currently trying to set up a no reply office 365 smtp email address.

When I go to test this and send and email using the following:

index=_internal source=*python.log
| head 1
| sendemail to=[email protected] sendresults=true server=smtp.office365.com:587

I get the following error:
command="sendemail", (554, '5.2.0 STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied; Failed to process message due to a permanent exception with message Cannot submit message.

Any suggestions or trouble steps on this would be greatly appreciated.

Thanks
Koroshi

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

SMTP reply code 554 means that your mail server is not accepting your email to relay (send) to another receiver. You must ask your mail administrator that they add your splunk host to allowed sender/relaying list. 
r. Ismo

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...