Sendemail "Invalid address" error while sending scheduled report via email after upgrading to 8.1.3

Path Finder

I have scheduled reports which sends pdf via sendemail. But After upgrading Splunk to 8.1.3 its not working, I am  seeing "Invalid address" error as below

112 -0400 ERROR sendemail:522 - (501, b'5.1.7 Invalid address', 'SPLUNK@serverdomainname') while sending mail to:
Is there any way that I can change the "From" address?
Thanks in advance!
Labels (1)
0 Karma


I got a non-similar but related problem:
Alert emails were not sent anymore after a major upgrade 6.6.0 => 7.2.1 (with machine transfer) => 8.1.4 => 8.2.2 (I know, we postponed our upgrade a bit too much 😉 )

So I could not know exactly which version "broke" our email sending.

But after several try and error, I figured that the "from" from email stanza in  $SPLUNK_HOME$\etc\system\local\alert_actions.conf (or Send emails as field in Settings > Server settings > Email settings) was containing a string "Splunk Server B102", perfectly supported in 6.6.0, but 8.2.2 did not agree with string containing space: after replacing the string with "Splunk_Server_B202" everything was back online!

So that was a weird one... (regression from my point of view)

Tags (1)
0 Karma


Did you try providing an alert_actions.conf with the from address?

from =

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...