Alerting

search error for sendemail

johnnyt
New Member

Dear

I search cmd:

sourcetype="access_combined" clientip="192.0.1.42" | sendemail to="teng.johnny@msa.hinet.net" format=html subject=myresults server=msa.hinet.net

the error

Input is not proper UTF-8, indicate encoding ! Bytes: 0xB3 0x73 0xBD 0x75, line 165, column 37

0 Karma

jrodman
Splunk Employee
Splunk Employee

Not really sure what component is not liking its input. My first guess is the python mail sender is failing to handle the raw data being passed to it by splunk.

Does this command work with other data?

If you output that data to a csv file, is there anything strange in it?

Is there more about the error, for example an indication of what component is emitting the error, or more about how the error is presented?

Is it possible that those are "smart quotes" somehow?

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...