Getting Data In

Email Input

cjaramilloc
Explorer

Hello Splunkers,

I'm wondering the best way to index an email. Not email server logs, the actual mail.

There are a couple apps that maybe help with this but they are very old:

https://splunkbase.splunk.com/app/3200/

https://splunkbase.splunk.com/app/1739/

Has anyone already did this? Any advice?

Christian

Tags (2)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

at least IMAPMailbox is working with splunk 7.3.x, but not anymore whit splunk 8 without rewriting it to support python 3.

r. Ismo

0 Karma

cjaramilloc
Explorer

I'm using Splunk 8. That's why I need an updated solution. 😕

0 Karma

isoutamo
SplunkTrust
SplunkTrust

One “temporary” solution is set up a HF (with 7.3.x) where run this until someone get better solution. 
r. Ismo

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...