Will IMAP Mailbox work for Splunk 6.2?

[kltest]

Hello,

I can't see how to install IMAP Mailbox in 6.2, presumably because it hasn't been marked as compatible with this version. Any chance I can force install it somehow..?

Thanks,

Andy

[adauria_splunk · Accepted solution]

You can try to untar the package into your $SPLUNK_HOME/etc/apps/ directory (should create its own sub directory) and restart Splunk.

[kltest]

Thanks Adauria, I managed to get it installed via this method but it wouldn't work.

Eventually, I found that I needed to add the following line at the end of Splunk\etc\apps\IMAPmailbox\default\restmap.conf:

handleractions=create,edit,list,remove,enable,disable,_reload

I then deleted the generated imap.conf file and copied the one from default, edited it and put my server details in, edited inputs.conf to enable the section for Windows and added the complete Splunk path in and it worked fine. 🙂