My alert is firing a trigger which I can see in my trigger log but no emails.
i configured the Splunk server to use smtp.office365.com with TLS and using my office365 credentials and i don't see email firing. Our other apps using that smtp server. I can ping the smtp server from splunk and I can telnet to the smtp server
Look in internal logs then OS, then network...