This project has inspired by the work of Simon Richardson, the add-on TA Zimbra.
We collect many zimbra mailbox and MTA log, we extract and indicize fields.
We provide SOAP API interface to Zimbra server.
With this add-on you can see many useful fields abount management operations and user activity for mailbox, EAS, authentication, SMTP.
Best used in combination with Splunk for Zimbra with Zextras.
Unfortunately this app is no longer maintained. You can go on the source in the github site and fork the project to continue the development.
Full Changelog: https://github.com/falon/TA_Zimbra_Zextras/compare/v0.0.5a...v0.0.6
Full Changelog: https://github.com/falon/TA_Zimbra_Zextras/compare/v0.0.5...v0.0.5a
Full Changelog: https://github.com/falon/TA_Zimbra_Zextras/compare/v0.0.4...v0.0.5
Added Rsyslog aggregator setup example (documentation)
Avoid riskly action warning in name2info
Better handle of easlog folder extraction (possible error on PCRE_LIMIT)
Extract postfix error fields
Minor fix for better action extraction.
Full Changelog: v0.0.3...v0.0.4
Many minor bug fixes.
Added field extractions for Calendar and Team.
First release.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.