EDR: Watchlist and Feed Email Alerts Not Sending Via External SMTP Server

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Watchlist and feed Email alerts not sending via external SMTP server.

Environment

• EDR Server: 6.5.1 and Higher

Cause

"EmailNotificationsFromAddress" parameter in cb.conf is not configured to send via sender account address on SMTP server.

Resolution

1. Edit /etc/cb/cb.conf:

   vi /etc/cb/cb.conf

2. Set "EmailNotificationsFromAddress" to the sender account Email address as configured on the SMTP server.
3. Restart cb-enterprise services on server.

Additional Information

The default value is: [email protected]