Hello Support,
I have changed my local SMTP server, & it is running on a windows 2012 R2 server. I changed the settings of SMTP in splunk to point to the new windows based (SMTP), server but it is no longer sending me alerts, I need to make splunk send me alerts using our new SMTP server, Is there anything, Im missing? Please, someone reply ASAP, as it urgent! Also, how can I send a quick test alert, so I can check it is actually working from splunk?
Hello muhammadamir,
It is hard to figure out the issue without looking at your settings. However, to test email alerts, you can use "sendmail" search command.
small correction here, the command is sendemail
http://docs.splunk.com/Documentation/Splunk/6.6.0/SearchReference/Sendemail
And as usual check index=_internal sourcetype=splunkd
for that host and see if you find any errors related to smtp.
cheers, MuS