Has anyone indexed maildir formatted email archives/folders before? I'm thinking this might be crazy but useful to ingest my archived mail, which is all on local disk on the system running Splunk.
Turns out that Splunk will read Maildir trees just fine. With some transform magic you can get all the fields to work, as well.
View solution in original post
is this what you are looking for
I don't know what the tacotacotaco stuff is for, but perhaps I could point Splunk just at the maildir and see what happens...
So, this is similar, but not quite it as I am thinking of full mail parsing for random email: