Need your help to resolve below issue.
Using below query, adding a button to Dashboard.
By clicking that button, sending the information of line to user.
Instead of using personal mail id, i will use official mail id is one of the change in below mentioned query.
Getting Following Error:
command="sendemail", 'rootCAPath' while sending mail to: email@example.com
index=_internal sendemail to="firstname.lastname@example.org" format=raw subject=myresults server=mail.splunk.com sendresults=true
Thanks in advance ..
Are you saying that with some other email address it works, but with this email, it does not? In other words, does
sendemail ever work for you? If not, check the error logs with this search:
index=_* sendemail AND (fail* OR err* OR timeout OR cannot OR incomplete OR invalid OR unknown OR reject* OR deni* OR deny)
You need to send result from
index=_internal to sendmail command and for that you need to use pipe
|, additionally please use correct mail server, in your query you have given
mail.splunk.com but do you have access to send email using
mail.splunk.com ? You need to use your company email server instead of
Please try below query
index=_internal | sendemail to="email@example.com" format=raw subject=myresults server=mail.splunk.com sendresults=true
First of all thank for the reply.
By mistake i left the | pipe in between index=_internal and sendemail while posting the query.
It's not working. As you said i will check for company mail server and give a try.