Testing alerting email action

Elastic Observability
,
1

Hey, I'm trying to setup email notifications and here's my current config within /etc/kibana/kibana.yml. I have self-managed ELK installation (Kibana 7.9.2) on Ubuntu.

xpack.actions.preconfigured:
 default-email:
   name: preconfigured-email-action-type
   actionTypeId: .email
   config:
     from: "alerting@look.com"
     host: smtp-mail.outlook.com
     port: 587
     secure: true
   secrets:
     user: "alerting@look.com"
     password: "super-strong-password"

I see this preconfigured action but it doesnt seem to be working.

The issue is the configuration is correct (when testing for example via simple python script)

    context = ssl.create_default_context()
    with smtplib.SMTP(SERVER, port=PORT) as server:
        server.ehlo()
        server.starttls(context=context)
        server.login(USERNAME, PASSWORD)
        server.sendmail(FROM, TO, message)
        server.quit()

Is there a way to test/validate this config?
Where to find/enable extra logging to see whether something is wrong with the integration?

2

Ok, so I was able to spot the issue with journalctl -u kibana -f and logs say something about wrong SSL configuration

Nov 11 10:54:41 elk kibana[7917]: {"type":"log","@timestamp":"2020-11-11T10:54:41Z","tags":["info","plugins","eventLog"],"pid":7917,"message":"event logged: {\"event\":
{\"provider\":\"actions\",\"action\":\"execute\",\"start\":\"2020-11-11T10:54:41.490Z\",\"end\":\"2020-11-11T10:54:41.573Z\",\"duration\":83000000,\"outcome\":\"failure\"},\"kibana\":
{\"saved_objects\":[{\"rel\":\"primary\",\"type\":\"action\",\"id\":\"default-email\"}],\"server_uuid\":\"f3f4884d-7f82-49ac-b27e-46cced486b31\"},
\"message\":\"action execution failure: .email:default-email: preconfigured-email-action-type\",
\"error\":{\"message\":\"error sending email: 140006590531392:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\\n\"},
\"@timestamp\":\"2020-11-11T10:54:41.573Z\",\"ecs\":{\"version\":\"1.5.0\"}}"}

error sending email: 140006590531392:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332

Now looking for the way to properly configure this part.