I need alert emails generated by saved search monitors to be delivered via an email server that requires SMTP Authentication.
How can I specify SMTP AUTH credentials with action.email.* values?
SMTP authentication should be possible in Splunk 4.2.
GERALD,
Can you post a sample sendemail.py script that has been modified to do SMTP AUTH?
Thank you.
No, I can't. But it's just a matter of getting the credentials, then inserting a call to smtp.login()
http://docs.python.org/library/smtplib.html#smtplib.SMTP.login after creating the smtp
in the line smtp = smtplib.SMTP(serverURL)
.
There are a couple of ways to do this:
$SPLUNK_HOME/etc/apps/search/bin/
. Rather than modifying the delivered file directly though (it will get clobbered on updates), you can create a version with a different name and either: override [sendemail]
in etc/apps/search/default/commands.conf
with a local .conf file, which will make Splunk just use the new version; or create a new commands.conf
entry and override the command
setting in the [email]
stanza in etc/system/default/alert_actions.conf
.