Hi all, I have an OUTLOOK email account that receives real-time email notifications on PC backup and I wanna index all these emails into my installed `IMAPmailbox` APP for data analysis and visualization. But now my `index=mail` return 0 events. Could someone help me with this?
In my `inputs.conf` , I only changed unix systems `diabled` attribute to true and windows one to false. Also, I modified configuration using Splunk UI and checked the imap.conf. These all looks normal.
Also, not sure if this is related but the inbox of the email account has nothing. All notifications are shown in the `Status Report` section as the same level of Inbox. They are divided into Success, Failed, Warning and Test.
But still my search returns nothing and I would like to know if extra modifications need to be done for this to wok? Thanks for your help!
↧
