BXTI Add-on for Proofpoint SER

BXTI Add-on for Proofpoint SER brings Proofpoint Secure Email Relay (SER) usage and delivery-failure reporting into Splunk through native, read-only API collection. It helps administrators monitor reported message volumes, throughput and delivery failures without a separate automation platform. Choose from eight overview and summary report types, including message usage, throughput, relay-user and tag reports, and message-failure summaries. Configure API credentials, destination index, polling interval, initial backfill and sourcetype directly in the add-on. Optional domain and recipient failure breakdowns are disabled by default and can be enabled for relay-user or tag failure inputs. Daily collection supports checkpointed catch-up and suppression of unchanged report rows. This add-on collects reporting aggregates, not individual email messages or message content. It is specific to Proofpoint SER, not Proofpoint TAP, Essentials or other Proofpoint APIs. It does not include dashboards or alert rules and does not claim CIM data-model compliance.