Default Version 1.0.0
June 29, 2026
Postfix Mail Add-on for Splunk
Technology add-on for parsing, field extraction, and CIM-aligned normalization of Postfix mail server logs.
Built by Cyberfox DEVELOPER
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 8.x, 6.x, 5.x
Rating
5
(1)
Log in to rate this app
Support
Developer Supported addon
The Postfix Mail Add-on for Splunk helps administrators, mail system engineers, and SOC teams parse, normalize, and analyze Postfix mail server logs in Splunk.
The add-on provides search-time field extractions, field aliases, event types, tags, and CIM-aligned mappings for common Postfix mail events. It is designed for Postfix logs collected from /var/log/maillog or equivalent syslog files using the recommended sourcetype postfix:syslog.
Categories
Email, SIEM
Created By
Cyberfox DEVELOPER
Type
addon
Downloads
12
Licensing
MIT License(Opens new window)Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing