Deployment Architecture

Why is the "sendemail" command not sending email on one of the member in search head cluster?

bharathgadikota
Engager

when am executing |sendemail xxxxx command in search, the job is getting queued and is running forever on one of the search head cluster members.

the is working fine on other cluster members and is sending mail.

email server settings are all same on all cluster members i don't know why |sendemail is not working on one server.

0 Karma
1 Solution

bharathgadikota
Engager

Got it resolved.

It was VM issue. restarting the VM solved the problem.

View solution in original post

0 Karma

bharathgadikota
Engager

Got it resolved.

It was VM issue. restarting the VM solved the problem.

0 Karma

Kate_Lawrence-G
Contributor

Are there any errors in the log & can you send email from that search head alone?
Try sending an email via telnet (https://mediatemple.net/community/products/dv/204404584/sending-or-viewing-emails-using-telnet) and see if you get an error. It might be ACL related or with the mail relay.

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...