SMTP authentication and SPLUNK database separate

[wingyip]

Dear sir,

I am evaluating the SPLUNK with windows version. I want to clarify the following questions:

1. How to configure SMTP authentication
2. I want to backup the database which is storing logs with separate partition.

Thanks!

[MarioM]

Or you could try as explained here:

http://answers.splunk.com/questions/1017/how-to-use-smtp-auth-for-action-email-mailserver-emails

[MarioM]

1-I think currently it's not possible to do SMTP auth but it will be in 4.2. The workaround could be to use a scripted alert where inside your script you can configure smtp auth.

2-When Splunk is indexing, the data moves through a series of stages and you have info about backup strategy here http://www.splunk.com/base/Documentation/latest/Admin/BackupIndexedData and about indexes partition http://www.splunk.com/base/Documentation/latest/Admin/HowSplunkstoresindexes

hope this help

[MarioM]

no i donot know the release day of 4.2

[wingyip]

Do you have release day of the 4.2 version ?

[MarioM]

Or you could try as explained here:http://answers.splunk.com/questions/1017/how-to-use-smtp-auth-for-action-email-mailserver-emails

[MarioM]

no not the alert_actions.conf but your own script

[wingyip]

Hi, about the SMTP auth, your meaning is to edit file alert_actions.conf. And which field has to edit for the auth. Is there any examples for me to do this?

Thanks!