Skip to main content
Microsoft Exchange On-Premise EWS app icon

Microsoft Exchange On-Premise EWS

This app performs email ingestion, investigative and containment actions on an on-premise Exchange installationBuilt by Splunk LLC
soar product badge
Default Version 4.1.4

July 31, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0

Rating
5
(2)

Log in to rate this app

Support
Splunk Supported
Ranking

#2 in Email

This app performs email ingestion, investigative and containment actions on an on-premise Exchange installation

Supported actions

  • test connectivity: test connectivity
  • on poll: on poll
  • on es poll: Poll for new emails and create ES findings for each email.
  • delete email: Delete emails
  • list addresses: Get the email addresses that make up a Distribution List
  • make request: make request
  • move email: Move an email to a folder
  • run query: Search emails
  • get email: Get an email from the server
  • lookup email: Resolve an Alias name or email address, into mailboxes
  • update email: Update an email on the server
  • copy email: Copy an email to a folder