How to monitor Zimbra mail?

[leenguyen07]

Step by step, I have Zimbra server with ip 192.168.1.2 and Splunk with ip 192.168.1.10. How do I configure Splunk to monitor Zimbra mail?

[dgrubb_splunk]

Identify the Zimbra log data you want to monitor.

Use a Splunk Universal Forwarder to monitor the log files and send the data to your Splunk indexer.

Using the Splunk documentation: Getting Data in

http://docs.splunk.com/Documentation/Splunk/6.3.1/Data/WhatSplunkcanmonitor

to assist in in properly source-typing the ingested data ensuring for proper time-stamping and event breaking.