Why am I having a problem with my schedule searches?

[DerekB]

Scheduled searches have stopped sending results via email. If I login to SplunkUI and bring up the scheduled searches from the Manager window, I can see the recent results, but I don't receive any emails. Any idea why?

Even using the sendmail command gives this error:

ERROR [Errno 10013] An attempt was made to access a socket in a way forbidden by its access permissions while sending mail to:

[DerekB · Accepted solution]

In this case, all of the permissions were correct. The problem was McAfee blocking the emails from being sent. If you are experiencing this, try turning of McAfee and see if that allows your emails of your scheduled searches to be sent.