Splunk Search

What capabilities are required for the "sendemail" search command?

athoma31
Explorer

The ability for many things in Splunk is controlled by capabilities applied to roles/users. In order for a user to utilize the "sendemail" command, what capabilities are necessary for their role to possess?

If there is a chart which contains search commands and the required capabilities that would suffice as well.

0 Karma
1 Solution

VatsalJagani
SplunkTrust
SplunkTrust

Hi @athoma31,

All users can access sendemail from all apps. And this applies to most of the internal commands.

For proof check command permission here - Settings > Advanced Search > Search Commands > Search for "sendemail" > Permissions.

Hope this helps!!!

View solution in original post

0 Karma

woodcock
Esteemed Legend

The only requirement is that you configure Settings -> Server settings -> Email settings.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

Hi @athoma31,

All users can access sendemail from all apps. And this applies to most of the internal commands.

For proof check command permission here - Settings > Advanced Search > Search Commands > Search for "sendemail" > Permissions.

Hope this helps!!!

0 Karma
Get Updates on the Splunk Community!

Mastering Threat Hunting

Watch NowWatch an insightful talk where we dive into the world of threat hunting, exploring the key ...

Harnessing Splunk’s Federated Search for Amazon S3

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated ...

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...