Splunk 6.6.0 (SMTP Requirement)

[muhammadamir]

Hello Support,
I have changed my local SMTP server, & it is running on a windows 2012 R2 server. I changed the settings of SMTP in splunk to point to the new windows based (SMTP), server but it is no longer sending me alerts, I need to make splunk send me alerts using our new SMTP server, Is there anything, Im missing? Please, someone reply ASAP, as it urgent! Also, how can I send a quick test alert, so I can check it is actually working from splunk?

[sudosplunk]

Hello muhammadamir,

It is hard to figure out the issue without looking at your settings. However, to test email alerts, you can use "sendmail" search command.

[MuS]

small correction here, the command is sendemail http://docs.splunk.com/Documentation/Splunk/6.6.0/SearchReference/Sendemail

And as usual check index=_internal sourcetype=splunkd for that host and see if you find any errors related to smtp.

cheers, MuS