Alerting

search error for sendemail

johnnyt
New Member

Dear

I search cmd:

sourcetype="access_combined" clientip="192.0.1.42" | sendemail to="teng.johnny@msa.hinet.net" format=html subject=myresults server=msa.hinet.net

the error

Input is not proper UTF-8, indicate encoding ! Bytes: 0xB3 0x73 0xBD 0x75, line 165, column 37

0 Karma

jrodman
Splunk Employee
Splunk Employee

Not really sure what component is not liking its input. My first guess is the python mail sender is failing to handle the raw data being passed to it by splunk.

Does this command work with other data?

If you output that data to a csv file, is there anything strange in it?

Is there more about the error, for example an indication of what component is emitting the error, or more about how the error is presented?

Is it possible that those are "smart quotes" somehow?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...