Reporting

Can we send report emails from multiple email accounts?

shivarpith
Path Finder

Hi,

I need to send reports to clients generated in splunk. The issue at hand is that I have to send the email from different email addresses. a unique email address for each project or client.

Thanks in advance.

Tags (3)
0 Karma

stephane_cyrill
Builder

docs.splunk.com/Documentation/Splunk/6.0.1/SearchReference/Sendemail

Syntax

sendemail to= [from=] [cc=]
[bcc=] [format= (html|raw|text|csv)] [inline= (true|false)]
[sendresults=(true|false)] [sendpdf=(true|false)] [priority= (highest|
high|normal|low|lowest)] [server=] [width_sort_columns=
(true|false)] [graceful=(true|false)] [sendresults=]
[sendpdf=]

from
Syntax: from=
Description: Email address from line. Defaults to
"splunk@".

0 Karma

Navanitha
Path Finder

This worked for me..Is there a way to change the signature also?

0 Karma

stephane_cyrill
Builder

You can updated savedsearches.conf (where
entry for these scheduled reports are
present) to add multiple email addresses
(comma separated).
See this
http://docs.splunk.com/Documentation/
Splunk/6.0.2/Report/Schedulereports

action.email.from =

The email address that is used as the sender's address.
Default is splunk@$LOCALHOST (or whatever is set for from in
alert_actions.conf ).

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...