Alerting

search error for sendemail

johnnyt
New Member

Dear

I search cmd:

sourcetype="access_combined" clientip="192.0.1.42" | sendemail to="teng.johnny@msa.hinet.net" format=html subject=myresults server=msa.hinet.net

the error

Input is not proper UTF-8, indicate encoding ! Bytes: 0xB3 0x73 0xBD 0x75, line 165, column 37

0 Karma

jrodman
Splunk Employee
Splunk Employee

Not really sure what component is not liking its input. My first guess is the python mail sender is failing to handle the raw data being passed to it by splunk.

Does this command work with other data?

If you output that data to a csv file, is there anything strange in it?

Is there more about the error, for example an indication of what component is emitting the error, or more about how the error is presented?

Is it possible that those are "smart quotes" somehow?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...