topic maildir indexing? in Reporting

maildir indexing?

jtrucks — Fri, 22 Mar 2013 20:56:30 GMT

Has anyone indexed maildir formatted email archives/folders before? I'm thinking this might be crazy but useful to ingest my archived mail, which is all on local disk on the system running Splunk.

Thoughts? Ideas?

Re: maildir indexing?

jtrucks — Fri, 22 Mar 2013 21:04:20 GMT

So, this is similar, but not quite it as I am thinking of full mail parsing for random email:

http://splunk-base.splunk.com/answers/61093/how-can-i-convert-mailbox-or-maildir-to-splunk

Re: maildir indexing?

eashwar — Sat, 23 Mar 2013 19:12:03 GMT

hi jtrucks

is this what you are looking for

http://blogs.splunk.com/2011/01/07/splunk-sysadmin-email/

Re: maildir indexing?

jtrucks — Mon, 15 Apr 2013 17:50:53 GMT

I don't know what the tacotacotaco stuff is for, but perhaps I could point Splunk just at the maildir and see what happens...

Re: maildir indexing?

jtrucks — Thu, 25 Jul 2013 03:49:18 GMT

Turns out that Splunk will read Maildir trees just fine. With some transform magic you can get all the fields to work, as well.