Request: drop all attachments

seunomosowon / TA-mailclient

This technology adapter add-on fetches emails for Splunk to index from mailboxes using either POP3 or IMAP, with or without SSL.

Apache License 2.0

9 stars 10 forks source link

Request: drop all attachments #27

Closed edro15 closed 3 years ago

edro15 commented 3 years ago

To prevent exposing potential PII data or ingesting extra data, it would be nice to integrate a parameter in inputs.conf to drop all attachments during the parsing phase (e.g. drop_attachment = 1). I hope you'll consider this integration into future releases. Thanks.

seunomosowon commented 3 years ago

This was added by a recent pull request.