command="sendemail", SMTP AUTH extension not supported by server.

[pduvofmr]

Hi splunker´s,

have a problem to send mails by splunk.

index=main | head 5 | sendemail to=my.name@XXX.com server=XXX.mail.protection.outlook.com subject="Here is an email notification" message="This is an example message" sendresults=true inline=true format=raw sendpdf=true
Mail has been sent

index=main | head 5 | sendemail to=my.name@XXX.com subject="Here is an email notification" message="This is an example message" sendresults=true inline=true format=raw sendpdf=true
Get this error: command="sendemail", SMTP AUTH extension not supported by server.

Server settings > email settings were set

Without the specification of the server no mails will be sent.
Thus, automatic reports do not send mails.
any idea?

[pduvofmr · Accepted solution]

Funny... set, and then clear the credentials for smtp works...

[pduvofmr]

Hi,

compare these both searches.
The only difference is, that in the second search the option "server=" isnt set.

In general splunk server options the mail host, seurity, username and password where set.

Why mailsent works in first search with the "server=" option and the second search wothout "serch=" didnt?

[woodcock]

The message is pretty clear, the email server that you are attempting to use to send your email does not accept passwordless simple SMTP AUTH, therefore you must configure Splunk to use a password to connect to your mail server.

[pduvofmr]

Hi,

compare these both searches.
The only difference is, that in the second search the option "server=" isnt set.

In general splunk server options the mail host, seurity, username and password where set.

Why mailsent works in first search with the "server=" option and the second search wothout "serch=" didnt?