Reporting

Sendemail command does not work

tkdguq0110
Path Finder

Hi all

I'm testing sendemail command but it's not sending email.

here's my search code

index=main
| table _time
| sendemail to=tkdguq0110@gmail.com subject=sendemail_test server=mail.google.com

and here's a log above

2020-05-04 19:32:27,700 +0900 ERROR sendemail:1435 - 'utf8' codec can't decode byte 0xbf in position 14: invalid start byte
Traceback (most recent call last):
File "C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 1428, in
results = sendEmail(results, settings, keywords, argvals)
File "C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 474, in sendEmail
errorMessage = str(e) + ' while sending mail to: ' + ssContent.get("action.email.to")
UnicodeDecodeError: 'utf8' codec can't decode byte 0xbf in position 14: invalid start byte

I do not know what the problem is.
I would appreciate if you give me any help
Thanks

Labels (1)
0 Karma
1 Solution

PavelP
Motivator

Hello @tkdguq0110 ,

can you try with quoted to string:

sendemail to="tkdguq0110@gmail.com" subject=sendemail_test server=mail.google.com

Additionally you have to specify other parameters because gmail accept authtenticated emails using encrypted channel only: https://answers.splunk.com/answers/38624/how-to-configure-email-alert-using-gmail-smtp.html

Please consider workarounds:
https://stackoverflow.com/questions/53264898/splunk-sendemail-fails-errno-99-with-mailserver-smtp-gm...

Let me know if it worked

View solution in original post

PavelP
Motivator

Hello @tkdguq0110 ,

can you try with quoted to string:

sendemail to="tkdguq0110@gmail.com" subject=sendemail_test server=mail.google.com

Additionally you have to specify other parameters because gmail accept authtenticated emails using encrypted channel only: https://answers.splunk.com/answers/38624/how-to-configure-email-alert-using-gmail-smtp.html

Please consider workarounds:
https://stackoverflow.com/questions/53264898/splunk-sendemail-fails-errno-99-with-mailserver-smtp-gm...

Let me know if it worked

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...