Splunk App for Microsoft Exchange
Overview
Details
• 2010 (requires Windows Server 2008 SP2 or Server 2008 R2 SP1 or later)
• 2013 (requires Windows Server 2012 RTM or later)
• 2016 (requires Windows Server 2016 RTM or later)
• 2019 (requires Windows Server 2016 RTM or later)
This app requires a paid license to use. The trial license lasts for 60 days.
Splunk App for Microsoft Exchange gathers performance metrics, log files, and PowerShell data from all aspects of Microsoft Exchange and its underlying infrastructure, including Active Directory, Windows, POP3, IMAP4, ActiveSync, Exchange Audit Logs, Outlook Web Access, and IIS, and presents the data in a series of operational dashboards covering IT Operations, Security Operations, Capacity Planning, and Helpdesk functionalities. IT and Security professionals can now use at-a-glance dashboards for their services, users and infrastructure.
Splunk App for Microsoft Exchange comes with over fifty out-of-the-box dashboards and reports. A unique First Time Run experience detects data you may have already to highlight areas for your specific environment. Host Monitoring, Print Monitoring, and Network Monitoring also light up new possibilities. Key functionalities include:
• Service Analyzer - Gain instant, real-time and historical visibility into the health of your entire email service and all its components, with granular composite health scores across the entire service path. Detect service anomalies faster with visibility into the health of each one of 11 service components that affect your overall email performance including: Outlook RPC, OWA, Active Sync, Transport, SMTP and many more
• Packaged Correlation – Easily identify the inter-relationships between performance, health, and security events using prebuilt dashboards and reports across the entire email service including infrastructure components. Use swim lane visualization and visual correlation across service components to quickly troubleshoot and navigate to the actual source of service degradation.
• Operations Dashboards: Gain up-to-the-minute information on the health of your Exchange environment and its supporting infrastructure such as Windows server and AD, including service availability, organizational reputation, performance data and administrative reports.
• Messaging Tracking: Track and troubleshoot message flow with segmentation and load information about message flow broken down from the desktop to the gateway.
• Client Behavior Monitoring: Gain in-depth visibility into how the messaging service is being utilized, including the method of access (device or protocol), operating system, browser, location and mailbox usage statistics. By identifying user trends, administrators can identify issues or possible bottlenecks and take preventive measures
• Capacity Planning: Plan capacity better with visibility into messaging volume and the number of users your system is handling over time to help you to plan for growth.
To learn more, please see refer to the official documentation here
Release Notes
Version 4.0.0
https://docs.splunk.com/Documentation/MSExchange/4.0.0/DeployMSX/Releasenotes
Version 3.5.2
https://docs.splunk.com/Documentation/MSExchange/3.5.2/DeployMSX/Releasenotes
Version 3.5.1
https://docs.splunk.com/Documentation/MSExchange/3.5.1/DeployMSX/Releasenotes#Release_notes_for_Splunk_App_for_Microsoft_Exchange
Version 3.5.0
http://docs.splunk.com/Documentation/MSExchange/3.5.0/DeployMSX/Releasenotes
Exchange app 3.5.0 has been updated to support Splunk add-on for Windows 5.0.1 but will not support multikv data.
Version 3.4.4
http://docs.splunk.com/Documentation/MSExchange/3.4.4/DeployMSX/Releasenotes
Version 3.4.3
Version 3.4.2
http://docs.splunk.com/Documentation/MSExchange/3.4.2/DeployMSX/Releasenotes
Version 3.4.1
Version 3.4.0
Version 3.3.0
http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Releasenotes
NOTE - This app is not yet compatible with Splunk 6.5. A Splunk 6.5 compatible release is coming soon!
Version 3.2.1
http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Releasenotes
Version 3.2.0
Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Releasenotes
Version 3.1.3
Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.1.3/DeployMSX/Releasenotes
Version 3.1.2
Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.1.2/DeployMSX/Releasenotes
Version 3.1.1
Fixed a bug with tHostinfo macros
Version 3.1.0
Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.1.0/DeployMSX/Releasenotes
Version 3.0.3
Bug Fixes
Version 3.0.2
Please refer to release notes published on splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.0.2/DeployMSX/Releasenotes
Version 3.0.1
Please see the release notes here: http://docs.splunk.com/Documentation/MSExchange/3.0.1/DeployMSX/Releasenotes