IBM QRadar

 View Only

 Rule Response (Email) Not Triggered

Or Mizrahi's profile image
Or Mizrahi posted Mon December 01, 2025 07:14 AM

Hey,

We have several rules configured with Email Response Actions.
Until last week, everything worked normally — emails were sent with no issues.
Suddenly, no Rule Response emails are being sent, and there are no errors in any QRadar logs (qradar.log, qradar.error, or audit logs).

Muhammad Burhan Faruqi's profile image
Muhammad Burhan Faruqi posted Sun December 07, 2025 12:10 AM

Hi,

Is it AIO or distributed deployment?

Anyways, you can test the connectivity for any Node from Admin Tab. Go to System and License Management option, double click the console and go to Emai Server tab. There you can find the hostname or IP of your mail server. Verify that the correct server nail is there. Additionally you can test the connectivity from QRadar to your email server from the same page. 

BR,

MBF

Related Content