Zimbra Server Configuration Changed

Detects configuration changes on the Zimbra server. Mail server configuration controls routing, authentication and logging; a change can create a delivery path, weaken authentication, or stop the server recording what happens next. Onboarding: ZIMBRA is ingested via Syslog (Bloo extractor 123). Integration guide: https://bloo.io/docs/hypercloud/syslog-connector BQL (Bloo Query Language): stream=configuration where sourcename='ZIMBRA' and action='CONFIGURATION_CHANGED' | groupby user, config