topic Can Splunk index an Outlook Inbox? in Reporting

Can Splunk index an Outlook Inbox?

rlautman — Tue, 10 Sep 2013 16:12:24 GMT

Is it possible to configure Splunk to monitor an Outlook inbox?

One solution I have considered is configuring the inbox to forward the mails to a file that Splunk would then index - would this work? Has anyone tried anything similar?

Any input is greatly appreciated!

Re: Can Splunk index an Outlook Inbox?

jtrucks — Tue, 10 Sep 2013 19:35:03 GMT

Use an IMAP connection to suck all the mail, then point Splunk at the maildir.

Re: Can Splunk index an Outlook Inbox?

rlautman — Wed, 11 Sep 2013 08:51:51 GMT

I'm assuming this is using the IMap app? -> http://apps.splunk.com/app/27

Re: Can Splunk index an Outlook Inbox?

YoungN — Tue, 30 Jul 2019 17:37:52 GMT

There is an option to export as file and you can export as CSV. This is onwe option if you have local access to th PST or inbox.

In Outlook 2016,
--> File
--> Open& Export
--> Import/Export
--> Export to file
--> Comma Serparated Values

Re: Can Splunk index an Outlook Inbox?

YoungN — Tue, 30 Jul 2019 17:43:16 GMT

Here is a Link for how to export. https://cumcprod.service-now.com/kb?id=kb_article_view&sys_kb_id=2ab5df221b3aa3009ff2bbfccd4bcb2c#top