All Apps and Add-ons

Send and receive import date

Path Finder

Hi,
Is it possible to index mails with send date, not received?

Tags (1)
0 Karma

Path Finder

I think if you index the headers of the email, then you will be able to search on that data as well.

in imap.conf add "fullHeaders = True" or use "1" either way should work.

Restart splunk and you should start importing the full email header fields.

0 Karma