topic Email Input in Getting Data In

Email Input

cjaramilloc — Wed, 26 Aug 2020 22:27:35 GMT

Hello Splunkers,

I'm wondering the best way to index an email. Not email server logs, the actual mail.

There are a couple apps that maybe help with this but they are very old:

Has anyone already did this? Any advice?

Christian

isoutamo — Thu, 27 Aug 2020 04:51:07 GMT

at least IMAPMailbox is working with splunk 7.3.x, but not anymore whit splunk 8 without rewriting it to support python 3.

r. Ismo

cjaramilloc — Thu, 27 Aug 2020 17:05:09 GMT

I'm using Splunk 8. That's why I need an updated solution. 😕

isoutamo — Thu, 27 Aug 2020 17:57:24 GMT

One “temporary” solution is set up a HF (with 7.3.x) where run this until someone get better solution.
r. Ismo