Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About apietersen
apietersen
Contributor
Member since:
05-25-2016
08-25-2025
Community Statistics
| Posts | 139 |
| Solutions | 2 |
| Karma Given | 19 |
| Karma Received | 11 |
| Member Since | 05-25-2016 |
Activity Feed
- Karma KVStore does not start when running Splunk 9.4 ( WITH A SOLUTION ) for triptraptresko. 04-08-2025 06:32 AM
- Posted Re: KVstore unable to start after upgrade to Splunk Enterprise 9.4 on Splunk Enterprise. 01-15-2025 04:13 AM
- Tagged Re: KVstore unable to start after upgrade to Splunk Enterprise 9.4 on Splunk Enterprise. 01-15-2025 04:13 AM
- Posted Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEAY32.dll (and libeay32.dll) on Splunk Enterprise. 12-28-2024 06:20 AM
- Karma Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEA32.dll (and libeay32.dll) for SanjayReddy. 12-11-2024 12:38 PM
- Posted Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEA32.dll (and libeay32.dll) on Splunk Enterprise. 12-11-2024 01:29 AM
- Posted Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEA32.dll (and libeay32.dll) on Splunk Enterprise. 12-09-2024 03:21 AM
- Posted Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEA32.dll (and libeay32.dll) on Splunk Enterprise. 12-08-2024 11:03 AM
- Posted Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEA32.dll (and libeay32.dll) on Splunk Enterprise. 12-08-2024 09:09 AM
- Posted Re: Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEA32.dll (and libeay32.dll) on Splunk Enterprise. 12-08-2024 07:05 AM
- Posted Upgrade Splunk Ent. 9.2.4 to 9.3.0 - error: not found SSLEAY32.dll (and libeay32.dll) on Splunk Enterprise. 12-07-2024 03:20 AM
- Posted Re: Sendemail does not work if selected in the Alert config, but sendemail does work! on Alerting. 02-19-2024 08:49 AM
- Posted Re: Sendemail does not work if selected in the Alert config, but sendemail does work! on Alerting. 02-17-2024 06:37 AM
- Posted Re: Sendemail does not work if selected in the Alert config, but sendemail does work! on Alerting. 02-17-2024 04:30 AM
- Posted Re: Sendemail does not work if selected in the Alert config, but sendemail does work! on Alerting. 02-17-2024 04:07 AM
- Posted Sendemail does not work if selected in the Alert config, but sendemail does work! on Alerting. 02-17-2024 01:29 AM
- Got Karma for Re: What is happening in Splunk Enterprise V9.1.0.1 ?. 12-06-2023 02:21 AM
- Posted Re: What is happening in Splunk Enterprise V9.1.0.1 ? on Splunk Enterprise. 12-06-2023 02:14 AM
- Posted Re: What is happening in Splunk Enterprise V9.1.0.1 ? on Splunk Enterprise. 11-21-2023 03:18 AM
- Posted Re: Why am I getting the following error when trying to install the Splunk Add on Builder on a Windows machine? on All Apps and Add-ons. 11-04-2023 11:33 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-22-2021
04:20 AM
Update: "sendemail" does not work for default users with default user-role capability. The issue was reported back to me to be solved in 8.1.3, unfortunately it is not.
... View more
03-22-2021
12:41 AM
This issue was reported by support to be solved in v8.1.3 . Unfortunately this issue is still there in v8.1.3
... View more
03-11-2021
06:45 AM
Hi Ashley, Message frome Splunk Support: .. According to the engineering department, the fix will be released in Splunk 8.1.3. Let me know if it worked for you... Regards
... View more
03-03-2021
08:07 AM
Just installed a complete fresh Splunk instance v8.1.2 from scratch on w2019 - no adjustments made. Only configured the smtp server setting. Tested it with admin account: sendemail works (but this has 'admin_all_objects' as a default capability. created a test account with standard user-role. (defaults without the 'admin_all_objects' capability). Sendemail does not werk without any visible error, although the search itself results in a timestamp search in serach&reporting used: | makeresults | sendemail to="x.yyyy@aaaaa.bb", from="y.yxxxx@bbbbb.aa"" , subject="test-message", sendresults=false inline=true format=raw content_type=html results in python.log: Traceback (most recent call last): File ""D:\Program Files\Splunk\etc\apps\search\bin\sendemail.py"", line 1593, in <module> results = sendEmail(results, settings, keywords, argvals) File ""D:\Program Files\Splunk\etc\apps\search\bin\sendemail.py"", line 376, in sendEmail if ssContent['action.email.sendresults'] or ssContent['action.email.sendpdf'] or ssContent['action.email.sendcsv']: KeyError: 'action.email.sendpdf'
... View more
03-03-2021
05:19 AM
same here, I am now in version 8.1.2, no solution yet. Reported (again) to support for a final solution. https://docs.splunk.com/Documentation/Splunk/8.1.2/ReleaseNotes/KnownIssues In my opnion this is nothing else than a security breach. Security for regular user is "wide open" if you want use this sendemail function. This issue has already a long history in version and the the lack of urgency begins to worry me.
... View more
03-03-2021
04:44 AM
Splunk support suggest the following: I was reviewing the know issues list and I found the issue number SPL-138647, See the link below for more information. https://docs.splunk.com/Documentation/Splunk/8.1.2/ReleaseNotes/KnownIssues
... View more
03-03-2021
04:43 AM
exactly the same error in lines in pyhton.log 2021-03-03 13:26:49,738 +0100 ERROR sendemail:1600 - 'action.email.allowedDomainList' Traceback (most recent call last): File "D:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 1593, in <module> results = sendEmail(results, settings, keywords, argvals) File "D:\Program Files\Splunk\etc\apps\search\bin\sendemail.py", line 469, in sendEmail
... View more
03-03-2021
04:40 AM
I have the same issue, from version 7.3 , with every new version (now 8.1.2) I hope this would be solved. Sendemail works only when you set the "Admin_All_Object" capability, but that is in fact a security breach for the regular user
... View more
03-03-2021
12:42 AM
Hi, It seems to be an issue with a long history in known issues - even from version 6.6 so I understand. What should I do next? Any tips?
... View more
03-03-2021
12:30 AM
update from splunk support: -=-=-=-= I hope you are doing well. I was reviewing the know issues list and I found the issue number SPL-138647, See the link below for more information. https://docs.splunk.com/Documentation/Splunk/8.1.2/ReleaseNotes/KnownIssues Let me know if it worked for you. -=-=-=-= unfortunately no success yet
... View more
03-02-2021
06:24 AM
update from support: -==-=-=-=- I hope you are doing well. I was reviewing the know issues list and I found the issue number SPL-138647, See the link below for more information. https://docs.splunk.com/Documentation/Splunk/8.1.2/ReleaseNotes/KnownIssues Let me know if it worked for you. -==-==-==- What I did : On our none-production instance/machine (rather a fresh installation), I did: Changed my “alert_action.conf” file to this (see below) : (as explained in the document and is less secure as I understand from that document) – named: Workaround Removed the “Admin_All_Ojects” capability from the Test user-role No success ☹ [email] Auth_password = xx auth_username =xx from =xx mailserver = smtp.office365.com:587 sslVersions = *,-ssl2 cipherSuite = TLSv1+HIGH:TLSv1.2+HIGH:@STRENGTH Unfortunately no success
... View more
02-26-2021
12:19 AM
last update Wednesday from Splunk support: "... just want to give you an update about the case, we are still working to find a solution, I engaged additional support to assist us with the issue, as soon as we have more information we will let you know. Please feel free to contact us if you have any questions." Keep you posted...
... View more
02-22-2021
08:09 AM
Thanks maraman_splunk, Unfortunately Splunk support does not respond ! They advised me earlier to select 'admin_all_objects' to use the command anyway. Because I really need the sendemail for some customer. Since v8.0 the other alternative was the option 'sendresults' but that was also not wokring anymore. Hoped this would solved in next version, but after 8.1.2 I am till struggling with this issue and have my 'door wide open' since because of this.
... View more
02-22-2021
07:49 AM
Hi, Since some version (now using 8.1.2) I have trouble to use the 'sendemail' command in a search (dashboard/form) for users that have the standard user-roles. This issue is troubling me for almost 1.5 year now. Of course I am aware of the need to select 'list_settings' but had never has any results. When selecting 'admin_all_objects' in the standard user-role it is successful. But using the 'admin_all_objects' for standard user is nothing but a security breach. That can not be the solution , so what do I miss here? An why does Splunk not create a separate and straightforward capability for this 'sendemail' command? Ashley Pietersen
... View more
02-22-2021
07:38 AM
Hi, Since some version (now using 8.1.2) I have trouble to use the 'sendemail' command in a search (dashboard/form) for user that have the standard user-roles. This issue is troubling me for almost 1.5 year now. Of course I am aware of the need to select 'list_settings' but had never a results. When selecting 'admin_all_objects' in the standard user-role is succesful. But using the 'admin_all_objects' for standard user is nothing but a security breach. That can not be the solution , so what do I miss here? An why does Splunk not create a special and straightforward capability for this 'sendemail' command? Ashley Pietersen
... View more
10-07-2020
07:42 AM
Found it. I was working on the wrong Splunk machine 😞 Change the .../bin/sendemail.py and look for "plainFooterTemplate" remove or replace the "------//----" string. After remove I received: "how do I get rid of the redundant characters "---" i-Alert" Thanks regards AshleyP
... View more
10-07-2020
06:05 AM
Yes I did, No succes. I agree it looks like a divider in the layout of the email.
... View more
10-07-2020
05:57 AM
Hi, When using sendemail cmd like this: | makeresults | sendemail to="aaaaaa", from="bbbbbb" , subject="" message="how do I get rid of the redundant characters "---" ", sendresults=false inline=true format=table content_type=plain footer="i-Alert" I receive: "how do I get rid of the redundant characters "---" ------------------------------------------------------------------------ i-Alert" I realy like to get rid of the "--------/ /---" string, especially when I want ot use sendemail for sms/txt messages. This is useless waist of text-space/length per sms / text-message. I have looked in sendemail.py and found 3 strings like "---- ---" but removing it had no effect on the result. Where should I look futher for removing this useless string of characters? regards AshleyP
... View more
08-25-2019
07:29 AM
I think I found the solution: adding a set token directly after query
<dashboard>
<label>variable-transfer</label>
<init>
<set token="err_page">https://mysplunkserver.nl/en-GB/static/</set>
</init>
<row>
<panel>
<title>Show the name of a valid helpfile</title>
<table>
<search>
<query>| makeresults
| eval msgcode="msgcode-46.html"
| table msgcode
</query>
<done>
<set token="file">$result.msgcode$</set>
</done>
<earliest>$earliest$</earliest>
<latest>$latest$</latest>
</search>
<option name="count">10</option>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
<row>
<panel>
<title>create a valid url string including helpfile</title>
<html>
<div> $err_page$$file$
<iframe src="$err_page$$file$" width="100%" />
</div>
</html>
</panel>
</row>
</dashboard>
... View more
08-25-2019
05:38 AM
Hi,
Want to embed a html page (html-file) as an iframe in a panel of a dashboard. Can not make it working, we use version 7.3.1 What do I wrong here?
Searched almost all docs and answer by no succes yet
apietersen
<dashboard>
<label>variable-transfer</label>
<init>
<set token="err_page">https://mysplunkserver.nl/en-GB/static/</set>
</init>
<row>
<panel>
<title>Show the name of a valid helpfile</title>
<table>
<search>
<query>| makeresults
| eval msgcode="msgcode-46.html"
| fields msgcode
| return $msgcode</query>
<earliest>$earliest$</earliest>
<latest>$latest$</latest>
</search>
<option name="count">10</option>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
<panel>
<title>create a valid url string including <helpfile>.html directing to static directory</title>
<html>
<div>
$err_page$ "Note: first part is OK but second part (filename) is NOT" $msgcode$
</div>
</html>
</panel>
</row>
</dashboard>
... View more
07-18-2019
12:36 AM
No response sofar, reason?
everybody knows? (stupid question, sorry)
nobody knows?
AshleyP
... View more
06-27-2019
04:25 AM
What algorithm / formula is used by the default and embedded Correlate command?
I like to know what algorithm & formula is used by default when using the (embedded) correlate command. Strange that this is not explicit mentioned in the documentation. I have found some references to python scripts but it was not clear and conclusively for me what the default correlate command use here.
I assume the use of the Pearson Correlation. But I am not sure.
Thanks
AshleyP
... View more
11-17-2018
01:21 AM
Please note: we send via an Office365 email-account
... View more
11-17-2018
01:20 AM
Btw this is the error-message when using a regular user-account using the search code:
| makeresults
| eval email_to="(valid-email-address)", email_subj="testing" , email_body="testing"
| sendresults
Error-message:
command="sendresults", Error : Traceback: Traceback (most recent call last): File "C:\Program Files\Splunk\etc\apps\sendresults\bin\sendresults.py", line 261, in sendemail(recipient, recipient_list[recipient].get('email_subj') , outbound, argvals) File "C:\Program Files\Splunk\etc\apps\sendresults\bin\sendresults.py", line 116, in sendemail smtp.sendmail(sender, string.split(recipient, ","), message) File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 736, in sendmail self.rset() File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 470, in rset return self.docmd("rset") File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 395, in docmd return self.getreply() File "C:\Program Files\Splunk\Python-2.7\Lib\smtplib.py", line 369, in getreply raise SMTPServerDisconnected("Connection unexpectedly closed") SMTPServerDisconnected: Connection unexpectedly closed
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-25-2025
04:34 AM
|
Karma given to
