Hello, I was trying to setup Alerting via emails and it wouldn't work. Alert for sure gets triggered, because other alert_action works (Add to triggered alerts) but the email one didn't.
In "var\log\splunk\python.log" I found out that for every trigger there is error log
Ex.:
I tried "| sendemail..." and it generates the same error there.
What is supposed to be in the endpoint and how do I fix it?
It's worth to check your email server settings and make sure they are valid servers
Server settings » Email settings
https://docs.splunk.com/Documentation/Splunk/9.0.0/Alert/Emailnotification
I am confident with my email server settings. I made(edited one I downloaded) custom alert action that consumes those settings and sends emails correctly. This is just workaround though and I am still working on the fix.