https://community.splunk.com/t5/Getting-Data-In/e-mail-body-indexing/m-p/52738#M10180 <P>Hello,<BR /> I'd like to ask the community, if there is possible to index somehow the body of e-mails sent through MS Exchange 2010.<BR /> I like to consider Splunk as possible DLP for e-mails.<BR /> Thank you,<BR /> Kamil</P> Mon, 02 Sep 2013 13:04:16 GMT hepterida 2013-09-02T13:04:16Z https://community.splunk.com/t5/Getting-Data-In/e-mail-body-indexing/m-p/52738#M10180 <P>Hello,<BR /> I'd like to ask the community, if there is possible to index somehow the body of e-mails sent through MS Exchange 2010.<BR /> I like to consider Splunk as possible DLP for e-mails.<BR /> Thank you,<BR /> Kamil</P> Mon, 02 Sep 2013 13:04:16 GMT https://community.splunk.com/t5/Getting-Data-In/e-mail-body-indexing/m-p/52738#M10180 hepterida 2013-09-02T13:04:16Z https://community.splunk.com/t5/Getting-Data-In/e-mail-body-indexing/m-p/52739#M10181 <P><A href="http://answers.splunk.com/answers/50048/splunk-consuming-email-alerts-from-other-monitoring-tools">http://answers.splunk.com/answers/50048/splunk-consuming-email-alerts-from-other-monitoring-tools</A></P> <P>Something like this should get the emails into Splunk. I believe you can create system rules in Exchange to BCC all email to an address.</P> <P>Let me know if that works for you.</P> <P>Richard</P> Tue, 03 Sep 2013 17:13:40 GMT https://community.splunk.com/t5/Getting-Data-In/e-mail-body-indexing/m-p/52739#M10181 rsolutions 2013-09-03T17:13:40Z