I have set up a Search Head Cluster with Splunk 6.4 and ran into some challenges.
Trying to send an email when alert is triggered, but it fails to send. Getting "Unexpected EOF" error.
Tried 'Schedule PDF Delivery' of a dashboard, and got same "Unexpected EOF"
Sending the test email failed: command="sendemail", (-1, 'Unexpected EOF') while sending mail to: email@example.com
From the Python Log:
2016-04-08 04:50:28,569 Pacific Daylight Time ERROR sendemail:127 - Sending email. subject="Stream error", results_link="http://**********:8800/app/opsalerts/@go?sid=scheduler__nobody__opsalerts__RMD5fb2ac14e7d33a13c_at_1460116200_3229_41D114D1-64B8-499E-A79C-EADED06D3A6F", recipients="[firstname.lastname@example.org']", server="184.108.40.206" 2016-04-08 04:50:28,571 Pacific Daylight Time ERROR sendemail:392 - (-1, 'Unexpected EOF') while sending mail to: email@example.com
Any help or a hint where to look would be appreciated!
Only a hint, but I hope it helps.
The python log is telling you where the error is, even if it's not providing much more information of use. That error is in file sendemail.py at line 392. That line, at least in MY file, is
mergedObject['token.name'] = ssContent.get('name'). I'm not sure what that's telling me, but it's right in the area of getting name, app and owner.
Knowing that, can you double-check the name of the report and make sure it's like super-standard regular characters with nothing weird in it? Maybe you have access to someone who knows python a bit better than I and can do some debugging?