Will sendresults work in splunk free license ?

[nibinabr]

Hi Guys,

Will sendresults work in splunk free license ? I see this error
raise splunk.LicenseRestriction LicenseRestriction: [HTTP 402] Current license does not allow the requested action

Thanks

[acharlieh · Accepted solution]

I suspect not. Doing a quick peek into the code behind sendresults, it uses Splunk's REST API (/servicesNS/-/-/admin/alert_actions/email) to retrieve email settings from Splunk itself. Since emailing from Splunk is an Enterprise feature, that endpoint will fail to return data.