Splunk Enterprise

Splunk Stopped sending email for Alerts and reports?

CHAUHAN812
Explorer

Splunk stopped sending email for Alerts, reports and Dashboards.

Checked from IT team regarding SMTP settings under server settings option and there is no issue found from their end.

Can you suggest me some solution or steps to resolve this issue.

 

 

Labels (1)
0 Karma

burwell
SplunkTrust
SplunkTrust

Did anything change on your servers running Splunk? What version are you running?

0 Karma

CHAUHAN812
Explorer

Thanks for your quick reply Vatsal.

Actually I already have tried with the above similar code but could not find much hint about the issue.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

Post the error messages here after masking the critical details so community can help you.

Tags (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@CHAUHAN812 - Start by looking at Splunk's internal logs for email-related stuff.

index=_internal ("email" OR "smtp") "ERROR"

You will get a lead from here on what could be wrong.

 

Kindly upvote if the answer helps you!!!

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...