Triggered alerts are not sending email but sendemail works (AWS SES SMTP)

Path Finder


I'm facing an error where all my scheduled searches are triggered, there no logs showing any error while trying to send the email, BUT I did not receive any email.

My splunk emailing system is integrated with AWS SES and I'm able to send (and receive) email using 'sendemail' command from the splunk search which tells me that the SES credentials are correct. 

Below are the logs showing that no errors while trying to send email.


2021-08-11 22:56:01,898 +0000 INFO sendemail:139 - Sending email. subject="|prod-us-west-2| SplunkAlert: TSD SES Email Alert Test ", results_link="", recipients="[u'']", server=""

Labels (2)
0 Karma


@mufthmu  Did you check the index=_internal sourcetype=splunk_python?

How did you test sendemail what params have you provided explicitly server= ?

alert_actions.conf on your SH has been set to mailserver = ? same you can find in server Settings -> Email section. 

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...