Reporting

Report email not delivered when adding domain to sender address

jbmitchell
Loves-to-Learn Lots

I created a saved search and a trigger upon completion to send myself an email that links to the finished job. It works mostly as intended by default, but it directs to my junk folder because the sender is "splunk" with no @domain.com. This would just be a minor inconvenience if the report was just going to go to me, but we are planning on rolling it out to several users and want to fix this.

I initally tried going to the report Advanced Settings and changed the "action.email.from" from just "splunk" to "splunk@ourcompany.com".  At that point the emails stopped coming completely.

I checked the log at  splunk/var/log/splunk/python.log for errors, but the only ones I have encountered are due to size limits which were resolved by removing the inline table. I have also gone to Server settings » Email settings and changed the "Send emails as" also to add my company domain.

It appears the only emails that are coming through are the ones with the specific report "Advanced Settings" "action.email.from" field set to just "splunk" without the domain, but they are still going to my junk folder and are unable to be marked as a safe sender because there is no domain on the address.

Could someone assist with troubleshooting this issue and how to add a domain to the sender address correctly?

Thanks.

Labels (2)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.