I downloaded the imap app and configured the imap.conf file, but I have two issues. First, the genpass.sh script returns this error:
Enter the password you want to encrypt: Enter it one more time to make sure you typed it in correctly:openssl: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory Copy the big ugly string on the line above and paste it into imap.ini as the value for xpassword. You can test that it works by running ./imaplaunch.sh
Strange thing is, I did get it to work once. Just once. So, I have put together an imap.conf file using the one encypted password I managed to get.
Second, after configuring the imap.conf file, I get the following error when I run the getimap.py script to test.
[root@splunk bin]# python getimap.py Traceback (most recent call last): File "getimap.py", line 698, in parseArgs() File "getimap.py", line 684, in parseArgs imapProc.initFromOptlist(optlist) File "getimap.py", line 149, in initFromOptlist raise ConfigError __main__.ConfigError
I also see this error in the splunkd.log file.
What am I doing wrong?
Erik Swan had me do the following:
cd spunk_home
bin/splunk cmd python etc/apps/imap/bin/getimap.py --debug
It should spit out something more useful.
Erik asked me to look at the file etc/apps/imap/local/imap.conf at which point I determined that the imap.conf file I had edited manually was in the wrong location. I copied my edited imap.conf from [splunkroot]/etc/apps/imap/default to [splunkroot]/etc/apps/imap/local and now it works.
Thanks Erik.
Erik Swan had me do the following:
cd
bin/splunk cmd python etc/apps/imap/bin/getimap.py --debug
It should spit out something more useful.
I then determined that the imap.conf file I edited manually was in the wrong location. I copied my imap.conf from [splunkroot]/etc/apps/imap/default to [splunkroot]/etc/apps/imap/local and now it works.
According to the Splunkbase entry for imap it was make by Erik. Would Erik happen to be available to comment on this?
(http://www.splunkbase.com/apps/All/4.x/App/app:Splunk+for+IMAP)