Hi,
we've made an update of Splunk (6.4 -> 6.6) and changed our certificates, everything works fine except one thing:
We're not able to send emails anymore. Triggered by alert or directly executed via SPL (| sendemail ...), both is not possible.
We get the following errors in python.log:
ERROR sendemail:137 - Sending email. subject="xxx", results_link="yyy", recipients="[u'name@server.com']", server="mail.server"
ERROR sendemail:443 - [Errno 2] No such file or directory while sending mail to: ...
In splunk.log it is almost the same message:
...[lot_of_arguments] ... ERROR sendemail:443 - [Errno 2] No such file or directory while sending mail to: ...
Does anyone have an idea, what file or directory Splunk cannot find when sending a mail or how I can find it out?
thx!
It is a simple typing error at line 115!
I have changed to:
sslConfJSON=ssContent.get('alert_Actions'),
because the splunk conf file name is with an underscore in it.
Thanks for your post in splunk answers 🙂
Well, I've found something but I would not call it a solution:
When I comment out the line 115 in the Script sendemail.py my Splunk is able to send mails again.
Content of the line:
sslConfJSON=ssContent.get('alertActions'),