All Apps and Add-ons

Sendresults App: what is the minimal user capability needed to use your sendresults app in Splunk Ent. version 7.2.1.

Path Finder

Hi,

Sendresults App: what is the minimal user capability needed to use your sendresults app in Splunk Ent. version 7.2.1
With user account admin no problems. Any other user throws a error message. When giving that user only "edit-all-objects" capability it works again, but this feels to much for a regular user. No information found what the essential capabilities re for this app.

We need to use some email-forms and the ssearch start with: | makeresults | eval .....| sendresults

somebody a clue?

regards Ashley Pietersen

0 Karma

Path Finder

Please note: we send via an Office365 email-account

0 Karma

Path Finder

Btw this is the error-message when using a regular user-account using the search code:

| makeresults
| eval emailto="(valid-email-address)", emailsubj="testing" , email_body="testing"
| sendresults

Error-message:

command="sendresults", Error : Traceback: Traceback (most recent call last): File "C:\Program Files\Splunk\etc\apps\sendresults\bin\sendresults.py", line 261, in sendemail(recipient, recipientlist[recipient].get('emailsubj') , outbound, argvals) File "C:\Program Files\Splunk\etc\apps\sendresults\bin\sendresults.py", line 116, in sendemail smtp.sendmail(sender, string.split(recipient, ","), message) File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 736, in sendmail self.rset() File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 470, in rset return self.docmd("rset") File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 395, in docmd return self.getreply() File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 369, in getreply raise SMTPServerDisconnected("Connection unexpectedly closed") SMTPServerDisconnected: Connection unexpectedly closed

0 Karma

Path Finder

Hi,

Thanks for posting about this issue. It's going to need a bit more investigation but I was able to reproduce the same issue.

It looks like the sendemail command also has some issues with lesser capabilities as well.

I'll do some testing and see if there is something we need to change in sendresults and/or what permissions need to be applied.

Derek.

0 Karma

Path Finder

Thanks Derek,
If I find some more details I will post it here..

0 Karma