Collect attachments in email as input.

[JWBailey]

I have an application that is able to output data via attachments in email.

I am interested in collecting the data from those attachments into splunk. Is there an easy way to have splunk input the attachments? Nothing complex, the attachments are either CSV or XLS files.

I understand it is probably better to input via a different mechanism, but the application owner is hesitant to make changes to the current system.

Thank you,

[richgalloway]

I had a similar problem and solved it by writing a scripted input that used the Office365 REST API to read emailed attachments. If you don't use Office365 then you may be able to use the IMAP Mailbox app.

[vmicovic2]

same here...

[midwest_mexican]

do you have code to share to you used to do this? I'm running into the same issue.

[Smith_Splunk]

Hi All,

I have the similar use case, But IMAP app won't support reading attachment.
Does any one know the steps to proceed on this.

Thanks,
Smith