I have been trying to index all the e-mails from a google mail account using the imap app(http://www.splunk.com/wiki/Apps:Splunk_for_IMAP), but without any success, all it shows when i log into splunk and go to the Mail application it just says .......0 messages last 60 minutes and over all time
Below shows my current settings in the imap.conf
server = mail.google.com <----tried imap.gmail.com no luck either, tried with another e-mail account and still doesn´t indexes
user = XXXXX <----tried with the @gmail.com and without it
password = xxxxxxxxxx
useSSL = True
port = 993
fullHeaders = False
includeBody = True
mimeTypes = text/plain
folders = all <----- tried putting INBOX, removing all, tried Inbox/label name etc, tried inbox.label name
imapSearch = UNDELETED SMALLER 204800 <---tried 504800 still no luck
deleteWhenDone = False
debug = False
noCache = True
splunkuser = admin
splunkpassword = changeme
splunkHostPath = http://localhost:8000 <---tried port 8089, https, still not working
timeout = 10
I´m using Splunk 4.1.2(79191), the mail account have IMAP activated
Can anybody tell me what i´m doing wrong, if its possible to index the mail of a google account?
... View more