This is a known bug and it will be fixed in the next release of Splunk. I don't have a time frame for that release at the moment. Basically, the python script sendemail.py will call the "rcpt to:" command twice without an email address. ... View more