Well, I fixed this myself, by editing splunk/etc/apps/search/bin/sendemail.py.
About line 17, before TIMEOUT=600, I added the line:
from time import strftime, gmtime, time
About line 145, before the comment # Clear leading / trailing whitespace ... I added the line:
message ['Date'] = strftime ("%a, %d %b %Y %H:%M:%S", gmtime (time()))
That seems to work -- now I just have to remember to make a similar change to any update of Splunk.
... View more