Skip to content
  • There are no suggestions because the search field is empty.

ESA is not sending emails in RSA Security Analytics 10.4 and above

Issue

ESA cannot send emails. An error similar to below is seen in the /opt/rsa/esa/logs/esa.log file.
 
A notification for 55efcc95f280f761c270a257 could not be sent. Reason: org.apache.commons.mail.EmailException: Sending the email to the following server failed : 10.250.50.200:25

Resolution

To resolve the issue, follow the steps below.
  1. Ensure port 25 is open on the firewall from the ESA to the SMTP server using the command below.
    curl -v <SMTP_SERVER>:25
  2. If the command above returns a successful connection but the error still persists, speak with the Email Admin and make sure that the ESA server IP has been added to the SMTP connector list.

Product Details

RSA Product Set: Security Analytics
RSA Product/Service Type: Event Stream Analysis (ESA)
RSA Version/Condition: 10.4.x, 10.5.x
Platform: CentOS
O/S Version: EL6

Summary

ESA not sending emails due to SMTP configuration issue


Approval Reviewer Queue

ASOC Approval Group