Splunk Enterprise

Getting 502 authentication error while using sendemail command

santosh94
Loves-to-Learn

Hello

I am trying to test the functionality of sending an email that will be sent because of an alert. For that, first I tried to send an email using the sendemail command. I used the free subscription of Brevo to get an accessible SMTP server to send an email. Then I tried configuring the email settings in my Splunk Enterprise. Below are the SS of my email settings

santosh94_1-1695303183660.png

For the password, I am using the MasterKey provided in the Brevo for my SMPT

santosh94_4-1695303350901.png

 

For the rest of the settings, I kept them as the default

santosh94_3-1695303305459.png

 

I am trying to send the data to a dummy email in Mailinator. Below is my searched SPL with the error.

santosh94_5-1695303601482.png

It is giving me an error for the email set as Send Email as user(Splunk) which I kept as default. I tried using my personal Gmail ID as well but got the same error for that ID.

Can anyone please help me on how to debug or resolve this issue.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

I think that currently there isn't any real email smtp server which don't want to use TLS and other authentication? So you must enable TLS and use smtp server which is supporting it.

Here is instructions how to use your personal Gmail account with splunk

https://community.splunk.com/t5/Alerting/Unable-to-send-test-email-from-Splunk/m-p/667242/highlight/...

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...