sendmail Error:command="sendemail", need more than 1 value to unpack while sending mail to xyz@xyz.com

[thezero]

Hi,

I am getting below error message when I am trying to send mail for search results or for scheduled reports in splunk for one app.Any pointers to resolve the issue?

command="sendemail", need more than 1 value to unpack while sending mail to xyz@xyz.com

[woodcock · Accepted solution]

On your Search Head go to Settings -> Server settings -> Email settings and edit your mail server stuff there.

This answer has settings to use gmail:

http://answers.splunk.com/answers/219761/how-to-configure-splunk-to-send-alert-emails-from.html

[thezero]

Hi,

Thanks for your suggestion.Email delivery is working when I moved my search to searching and reporting app ,but its not working when I am trying same in my custom apps.Do I need to copy sendmail.py in my custom app bin folder or are there any conf need to add my custom app to allow email delivery?Please advice

[woodcock]

You should stop copying files around and configure the setting globally as I indicated in my answer (unless there is a need for different apps to use different mail servers). If it works for the "Searching and Reporting" app it is either because there is not local configuration and it is default to the global configuration which is configured correctly OR it is that there is a working local configuration and so you should copy the details out of that into the global settings and you will be done.

[KelvinS687]

Try to configure Splunk with a proper connection to a valid SMTP server. I doubt that proxy.com:8080 is a valid SMTP server.
You need to make sure your basic SMTP connection is working before trying to move on to conditional alerts and stuff.

Regards,
Kelvin Smith