Where does splunk log email failures

[adoshi]

It seems that Splunk is not sending the emails when the alerts are triggered. Is there any place where I can see what errors were logged when splunk tried to send the alert email?

[Amandeepsin]

Check

cat /var/log/maillog

Check if any connection is refused by SMTP Server... If yes, then inform your IT Team

[Amandeepsin]

Try to check under Server Settings and Then Email Settings
Afterwards check Alert Action on Splunk UI

[johnquinn]

Maillog doesn't exist on Insights for infrastructure and our python.log file is empty.
SMTP server settings are set the same way as many other systems, but the alerts from splunk do not get sent.
Need a way to troubleshoot the issues.

Thanks,

[yannK]

Check in $SPLUNK_HOME/var/log/splunk/python.log

or use the search :
index=_internal source=*python.log*

[gjanders]

I created an alert called "AllSplunkEnterpriseLevel - Email Sending Failures", if you needed an example it's available in github here or the app with all the alerts is available here, Alerts For Splunk Admins

[adoshi]

Thank you.

[woodcock]

You should click Accept on this answer, @adoshi, to close the question.

[gjanders]

@woodcock it might be worth noting this is a 2012 post and the user was last seen in 2015...