000032462 - ESA is not sending emails in RSA Security Analytics 10.4 and above

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000032462
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Event Stream Analysis (ESA)
RSA Version/Condition: 10.4.x, 10.5.x
Platform: CentOS
O/S Version: EL6
IssueESA cannot send emails. An error similar to below is seen in the /opt/rsa/esa/logs/esa.log file.
 
A notification for 55efcc95f280f761c270a257 could not be sent. Reason: org.apache.commons.mail.EmailException: Sending the email to the following server failed : 10.250.50.200:25
ResolutionTo resolve the issue, follow the steps below.
  1. Ensure port 25 is open on the firewall from the ESA to the SMTP server using the command below.
    curl -v <SMTP_SERVER>:25

  2. If the command above returns a successful connection but the error still persists, speak with the Email Admin and make sure that the ESA server IP has been added to the SMTP connector list.

Attachments

    Outcomes