Alerting

Triggered alerts are not sending email but sendemail works (AWS SES SMTP)

mufthmu
Path Finder

Hi,

I'm facing an error where all my scheduled searches are triggered, there no logs showing any error while trying to send the email, BUT I did not receive any email.

My splunk emailing system is integrated with AWS SES and I'm able to send (and receive) email using 'sendemail' command from the splunk search which tells me that the SES credentials are correct. 

Below are the logs showing that no errors while trying to send email.

Thanks!

2021-08-11 22:56:01,898 +0000 INFO sendemail:139 - Sending email. subject="|prod-us-west-2| SplunkAlert: TSD SES Email Alert Test ", results_link="https://aws-prod-west-splunk.tscloudservice.com/app/TsdApp/@go?sid=scheduler__admin__TsdApp__RMD5cd8884db53568853_at_1628722560_51987_FDE004B7-D863-4836-AC24-BFAEBA400C09", recipients="[u'muhammad.mufthi@example.com']", server="email-smtp.us-west-2.amazonaws.com"

Labels (2)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

@mufthmu  Did you check the index=_internal sourcetype=splunk_python?

How did you test sendemail what params have you provided explicitly server= ?

alert_actions.conf on your SH has been set to mailserver = ? same you can find in server Settings -> Email section. 

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!