Hi everyone,
We are trying to configure emails sending from Splunk through our SMTP server.
When i run
index=test sourcetype="_json" ERROR "message": "ORA*" | sendemail to="xx@xx.com" subject="Testing Email from Splunk" use_ssl=false use_tls=true server=xxx.mail.xxx:25
This works as expected and email is sent.
I then checked my email settings under Settings -> Server Settings -> Email Settings and I had mailserver: xxx.mail.xxx TLS Enabled Username and password filled Leaving the settings like this will cause the error message:
ERROR sendemail:470 - SMTP AUTH extension not supported by server. while sending mail to:xxx@xxx.com
If I change the mail server to include port :25 I still get the same error
ERROR sendemail:470 - SMTP AUTH extension not supported by server. while sending mail to:xxx@xxx.com
Nevertheless, the sendemail directly from the search app will stop working with the settings including the port :25, i.e., now the same command we ran the in the beggining fails and produces the same error message:
ERROR sendemail:470 - SMTP AUTH extension not supported by server. while sending mail to:xxx@xxx.com
I am just trying to understand how can I test with sendemail command in splunk search and then mirror the correct settings to the Settings so that email triggers work. I am confused with how Settings configurations change the behaviour of sendemail command.
Could someone please help?
... View more