Reporting

Sendemail command does not work

tkdguq0110
Path Finder

Hi all

I'm testing sendemail command but it's not sending email.

here's my search code

index=main
| table _time
| sendemail to=tkdguq0110@gmail.com subject=sendemail_test server=mail.google.com

and here's a log above

2020-05-04 19:32:27,700 +0900 ERROR sendemail:1435 - 'utf8' codec can't decode byte 0xbf in position 14: invalid start byte
Traceback (most recent call last):
File "C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 1428, in
results = sendEmail(results, settings, keywords, argvals)
File "C:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 474, in sendEmail
errorMessage = str(e) + ' while sending mail to: ' + ssContent.get("action.email.to")
UnicodeDecodeError: 'utf8' codec can't decode byte 0xbf in position 14: invalid start byte

I do not know what the problem is.
I would appreciate if you give me any help
Thanks

0 Karma
1 Solution

PavelP
Motivator

Hello @tkdguq0110 ,

can you try with quoted to string:

sendemail to="tkdguq0110@gmail.com" subject=sendemail_test server=mail.google.com

Additionally you have to specify other parameters because gmail accept authtenticated emails using encrypted channel only: https://answers.splunk.com/answers/38624/how-to-configure-email-alert-using-gmail-smtp.html

Please consider workarounds:
https://stackoverflow.com/questions/53264898/splunk-sendemail-fails-errno-99-with-mailserver-smtp-gm...

Let me know if it worked

View solution in original post

PavelP
Motivator

Hello @tkdguq0110 ,

can you try with quoted to string:

sendemail to="tkdguq0110@gmail.com" subject=sendemail_test server=mail.google.com

Additionally you have to specify other parameters because gmail accept authtenticated emails using encrypted channel only: https://answers.splunk.com/answers/38624/how-to-configure-email-alert-using-gmail-smtp.html

Please consider workarounds:
https://stackoverflow.com/questions/53264898/splunk-sendemail-fails-errno-99-with-mailserver-smtp-gm...

Let me know if it worked

Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...