There are loads of GroupWise logs occurring all over your network.
I read the Cool Solutions article at: http://www.novell.com/coolsolutions/feature/18044.html and saw the Splunk link. This led me to create this Splunk bundle for for GroupWise logs:
You can load this GroupWise bundle and see what's going on in your domain.
Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).
It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.