e-mail body indexing

hepterida · ‎09-02-2013

Hello,
I'd like to ask the community, if there is possible to index somehow the body of e-mails sent through MS Exchange 2010.
I like to consider Splunk as possible DLP for e-mails.
Thank you,
Kamil

rsolutions · ‎09-03-2013

http://answers.splunk.com/answers/50048/splunk-consuming-email-alerts-from-other-monitoring-tools

Something like this should get the emails into Splunk. I believe you can create system rules in Exchange to BCC all email to an address.

Let me know if that works for you.

Richard

e-mail body indexing

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Join the Conversation

e-mail body indexing

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent