Splunk Dev

How to send email via SSL/TLS using localhost?

jadamsplunk
Path Finder

Hello all,

I am attempting to get my Splunk VM to send email via SSL or TLS using the localhost settings. I want to use localhost because I do not have access to any mail relay (3rd party such as GMAIL, HOTMAIL, etc are out of the question). When I configure Splunk to use SSL/TLS and then I run a simple sendemail test ( index=_audit | head 3 | sendemail to="me@me.com" use_ssl=true / index=_audit | head 3 | sendemail to="me@me.com" use_tls=true) I get the following error:

command="sendemail", [Errno 111] Connection refused while sending mail

The actual intent of this is to successfully send email from localhost using SSL/TLS from a python script I've written as part of an app I'm submitting for approval to Splunk Cloud, which was denied because I was sending email without SSL. It works fine with non-SSL but it fails with localhost settings.

I feel like there may be something fundamental I'm missing.

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Would it be possible to create a toggle in the settings of your app for SSL, defaulting to *True* but giving you the option to set to False once uploaded?

It does sound a little odd though, If it isnt using SSL when sending to localhost then I'm not sure how they can enforce it for your own app that uses the same mechanism?

It might be worth asking for an escalation through support to see if you can come to an agreement with them.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...