Unable to schedule report using sendmail

[Navanitha]

My sendmail search is working fine in GUI but when i try to schedule a report with sendmail in my search query, I am not getting any email.
Can someone guide me to fix this?

Thanks,

[Navanitha]

index=prod_ironport "[email protected]" "ready" "MID"|stats count | sendemail to="[email protected]" from=[email protected] cc=[email protected] format= text inline= true sendresults=true server="our server name"

looks something like this..replaced with dummy mails ids 😉

[srinathd]

when you save your search query "index=prod_ironport "[email protected]" "ready" "MID"|stats count" as a saved search, you can also schedule email alert. you can edit email settings and provide the mail id's there instead of giving them in the search query.

[Navanitha]

yes I can schedule the email alerts but here my requirement is to change the from address for this particular project. If i have to schedule the email and change the from address in my scrip, that would effect all the email which I don't want. for only this particular query I want the results to be sent with a different from address. Hence I am trying to use "sendmail". Hope you understood my requirement.

[srinathd]

Sendmail command works only in search bar of splunk. check this link http://docs.splunk.com/Documentation/Splunk/6.2.3/Alert/Setupalertactions#Configure_email_notificati...

[srinathd]

Can you post your query here. It will help.