The NetWitness Event Stream Analysis (ESA) server is not sending emails to the Customer's Email Server

Issue

ESA cannot send emails.
An error similar to below is seen in the /var/log/netwitness/integration-server/integration-server.log file.

 WARN   Notification|SMTP dispatch failed (Reason: Sending the email to the following server failed : XXXXXXXXXXX-com.mail.protection.outlook.com:25)
 
    Line    44: java.lang.IllegalArgumentException: org.apache.commons.mail.EmailException: Sending the email to the following server failed : XXXXXXXXXXX-com.mail.protection.outlook.com:25
 
    Line    54: Caused by: org.apache.commons.mail.EmailException: Sending the email to the following server failed : XXXXXXXXXXX-com.mail.protection.outlook.com:25

Resolution

To resolve the issue, follow the below steps:

1- Ensure port 25 is open on the firewall from the ESA to the SMTP server using the command below

 curl -v <SMTP_SERVER>:25

2- If the command above returns a successful connection but the error still persists, speak with the Email Admin and make sure that the ESA server IP has been added to the SMTP connector list.

Internal Comments

Hamed Torabi -- 1 Feb 2016
Created the article.

David Waugh -- 1 Feb 2016
Technically reviewed the article.

Jeff Shurtliff -- 12 Feb 2016
Performed KCS Review. Modified the article and applied formatting to adhere to best practices.

Mirna Amir -- 23 April 2024
Corrected the log file name and the provided the full error
Added 12.x and AlmaLinux

Product Details

RSA Product Set: Admin Server
RSA Product/Service Type: Event Stream Analysis (ESA)
RSA Version/Condition: 10.x, 11.x, 12.x
Platform: CentOS, AlmaLinux
O/S Version: EL6

Summary

ESA not sending emails due to SMTP configuration issue

Approval Reviewer Queue

Technical approval queue