Splunk search for Issues Sending Email Reports from Splunk
Copy
index=_internal sourcetype=splunk_python sendemail ERROR
This search will yield results showing emails that failed to send from the Splunk SH. For example, this will show when a report failed to send due to a message size that exceeds the SMTP server's size limit.