Reporting

receive emails from thirdpart app as event in splunk

pouriajalilian1
New Member

i have a server that the only way it can alert on events is to send emails to an external thirdparty app ,like splunk.so i want to monitor whenever it receives emails and create alerts,dashboards based on that events.is it possible??please give me clear advice on that .

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk cannot receive email directly. It can, however, access IMAP mailboxes using the IMAP Mailbox app (https://splunkbase.splunk.com/app/1739/). I once wrote a scripted input to access Office 365 mailboxes using an API that is no longer supported. So there are options. Post specific questions and we may be able to help more.

---
If this reply helps you, Karma would be appreciated.
0 Karma

pouriajalilian1
New Member

[IMAP Configuration]
debug = 0
deleteWhenDone = 0
disabled = 0
fullHeaders = 1
includeBody = 1
noCache = 0
port = 587
server = mail.test.com
useSSL = 1
user =username@test.com
password =**********
mimeTypes = text/plain
folders = all
imapSearch = UNDELETED
deleteWhenDone = False
noCache = False
splunkuser = admin
splunkpassword =*****
timeout = 10
---------i wrote something like this,but it didnt work.
besides,i enabled windows script on inputs.conf and disabled nix one as instructed in the manual .help me please

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I don't know enough about the IMAP app to offer detailed help. You may want to post a new question.

---
If this reply helps you, Karma would be appreciated.
0 Karma

pouriajalilian1
New Member

thank you my friend

0 Karma

pouriajalilian1
New Member

does Streams events from from a mail server. is what i have to configure?? in this way,i couldnt set protocol filed .

0 Karma
Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...