Can Splunk index an Outlook Inbox?

[rlautman]

Is it possible to configure Splunk to monitor an Outlook inbox?

One solution I have considered is configuring the inbox to forward the mails to a file that Splunk would then index - would this work? Has anyone tried anything similar?

Any input is greatly appreciated!

[nyoung_splunk]

There is an option to export as file and you can export as CSV. This is onwe option if you have local access to th PST or inbox.

In Outlook 2016,
--> File
--> Open& Export
--> Import/Export
--> Export to file
--> Comma Serparated Values

[nyoung_splunk]

Here is a Link for how to export. https://cumcprod.service-now.com/kb?id=kb_article_view&sys_kb_id=2ab5df221b3aa3009ff2bbfccd4bcb2c#to...

[jtrucks]

Use an IMAP connection to suck all the mail, then point Splunk at the maildir.

[rlautman]

I'm assuming this is using the IMap app? -> http://apps.splunk.com/app/27