Default Version 1.0.0
June 29, 2026
Postfix Mail Add-on for Splunk
Technology add-on for parsing, field extraction, and CIM-aligned normalization of Postfix mail server logs.Built by Cyberfox DEVELOPER
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 8.x, 6.x, 5.x
Rating
5(1)
Log in to rate this app
Support
Developer Supported
The Postfix Mail Add-on for Splunk helps administrators, mail system engineers, and SOC teams parse, normalize, and analyze Postfix mail server logs in Splunk. The add-on provides search-time field extractions, field aliases, event types, tags, and CIM-aligned mappings for common Postfix mail events. It is designed for Postfix logs collected from /var/log/maillog or equivalent syslog files using the recommended sourcetype postfix:syslog.
Categories
Email, SIEM
Created by
Cyberfox DEVELOPER
Type
addon
Downloads
48
Licensing
Splunk Answers
Resources
Log in to report this app listing.