Splunk App for Microsoft Exchange

Overview

Details

A single solution that uses the power of the Splunk Enterprise platform to gather performance, log and configuration data from all elements of Microsoft Exchange and its underlying infrastructure to provide operational insight into entire messaging infrastructure, as well as critical dependencies, such as the operating system, supporting applications, devices and/or services. The result is a single view across the entire email service infrastructure, available in a single location, highlighting problem areas proactively to resolve issues quickly and avoid service degradation and downtime. The Splunk App for Microsoft Exchange supports Exchange Server versions:

• 2007 (requires Windows Server 2003 SP1 or Server 2003 R2 RTM or later)
• 2010 (requires Windows Server 2008 SP2 or Server 2008 R2 SP1 or later)
• 2013 (requires Windows Server 2012 RTM or later)
• 2016 (requires Windows Server 2016 RTM or later)

This app requires a paid license to use. The trial license lasts for 60 days.

Splunk App for Microsoft Exchange gathers performance metrics, log files, and PowerShell data from all aspects of Microsoft Exchange and its underlying infrastructure, including Active Directory, Windows, POP3, IMAP4, ActiveSync, Exchange Audit Logs, Outlook Web Access, and IIS, and presents the data in a series of operational dashboards covering IT Operations, Security Operations, Capacity Planning, and Helpdesk functionalities. IT and Security professionals can now use at-a-glance dashboards for their services, users and infrastructure.

Splunk App for Microsoft Exchange comes with over fifty out-of-the-box dashboards and reports. A unique First Time Run experience detects data you may have already to highlight areas for your specific environment. Host Monitoring, Print Monitoring, and Network Monitoring also light up new possibilities. Key functionalities include:

• Service Analyzer - Gain instant, real-time and historical visibility into the health of your entire email service and all its components, with granular composite health scores across the entire service path. Detect service anomalies faster with visibility into the health of each one of 11 service components that affect your overall email performance including: Outlook RPC, OWA, Active Sync, Transport, SMTP and many more
• Packaged Correlation – Easily identify the inter-relationships between performance, health, and security events using prebuilt dashboards and reports across the entire email service including infrastructure components. Use swim lane visualization and visual correlation across service components to quickly troubleshoot and navigate to the actual source of service degradation.
• Operations Dashboards: Gain up-to-the-minute information on the health of your Exchange environment and its supporting infrastructure such as Windows server and AD, including service availability, organizational reputation, performance data and administrative reports.
• Messaging Tracking: Track and troubleshoot message flow with segmentation and load information about message flow broken down from the desktop to the gateway.
• Client Behavior Monitoring: Gain in-depth visibility into how the messaging service is being utilized, including the method of access (device or protocol), operating system, browser, location and mailbox usage statistics. By identifying user trends, administrators can identify issues or possible bottlenecks and take preventive measures
• Capacity Planning: Plan capacity better with visibility into messaging volume and the number of users your system is handling over time to help you to plan for growth.

To learn more, please see refer to the official documentation here

Release Notes

Version 3.5.1

Dec. 8, 2018

https://docs.splunk.com/Documentation/MSExchange/3.5.1/DeployMSX/Releasenotes#Release_notes_for_Splunk_App_for_Microsoft_Exchange

Version 3.5.0

Oct. 16, 2018

http://docs.splunk.com/Documentation/MSExchange/3.5.0/DeployMSX/Releasenotes

Exchange app 3.5.0 has been updated to support Splunk add-on for Windows 5.0.1 but will not support multikv data.

Version 3.4.4

June 14, 2018

http://docs.splunk.com/Documentation/MSExchange/3.4.4/DeployMSX/Releasenotes

Version 3.4.3

Dec. 19, 2017

Version 3.4.2

June 13, 2017

http://docs.splunk.com/Documentation/MSExchange/3.4.2/DeployMSX/Releasenotes

Version 3.4.1

Feb. 7, 2017

Version 3.4.0

Oct. 12, 2016

Version 3.3.0

July 6, 2016

http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Releasenotes

NOTE - This app is not yet compatible with Splunk 6.5. A Splunk 6.5 compatible release is coming soon!

Version 3.2.1

March 7, 2016

http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Releasenotes

Version 3.2.0

Dec. 9, 2015

Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Releasenotes

Version 3.1.3

May 26, 2015

Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.1.3/DeployMSX/Releasenotes

Version 3.1.2

Feb. 26, 2015

Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.1.2/DeployMSX/Releasenotes

Version 3.1.1

Dec. 15, 2014

Fixed a bug with tHostinfo macros

Version 3.1.0

Dec. 15, 2014

Refer to the release notes on Splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.1.0/DeployMSX/Releasenotes

Version 3.0.3

Sept. 30, 2014

Bug Fixes

Version 3.0.2

Sept. 2, 2014

Please refer to release notes published on splunk.com
http://docs.splunk.com/Documentation/MSExchange/3.0.2/DeployMSX/Releasenotes

Version 3.0.1

May 14, 2014

Please see the release notes here: http://docs.splunk.com/Documentation/MSExchange/3.0.1/DeployMSX/Releasenotes

679

Installs

17,931

Downloads

Share Subscribe LOGIN TO DOWNLOAD

Version

Built by

Splunk Inc.

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

App Contents: Inputs

Compatibility

This version is not yet available for Splunk Cloud.

Products: Splunk Enterprise

Products: Splunk Cloud, Splunk Enterprise

Products: Splunk Enterprise

Products: Splunk Cloud, Splunk Enterprise

Products: Splunk Enterprise

Products: Splunk Cloud, Splunk Enterprise

Products: Splunk Enterprise

Products: Splunk Cloud, Splunk Enterprise

Splunk Versions: 7.2, 7.1, 7.0