Splunk® App for Microsoft Exchange (EOL)

Deploy and Use the Splunk App for Microsoft Exchange

On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.

Download and configure the Splunk Add-ons for Exchange

This topic discusses how to download and configure the Splunk Add-ons for Microsoft Exchange and deploy them to your deployment clients so that they forward Exchange data to the Splunk App for Microsoft Exchange indexer.

The Splunk App for Microsoft Exchange download package comes with a suite of add-ons that collect Exchange data data (as well as other data types, previously discussed.) When you deploy the add-ons to your Exchange server deployment clients, the clients collect Exchange data and forward it to the central Splunk App for Microsoft Exchange indexer.

More information about the Exchange add-ons

The following table lists the Exchange add-ons that come with the Splunk App for Microsoft Exchange, and what each add-on provides.

Add-on: Description:
TA-Exchange-2007-CAS For hosts that run Exchange Server 2007 and hold the Client Access Server role
TA-Exchange-2007-HubTransport For hosts that run Exchange Server 2007 and hold the Hub Transport server role
TA-Exchange-2007-MailboxStore For hosts that run Exchange Server 2007 and hold the Mailbox Server role
TA-Exchange-2010-CAS For hosts that run Exchange Server 2010 and hold the Client Access Server role
TA-Exchange-2010-HubTransport For hosts that run Exchange Server 2010 and hold the Hub Transport server role
TA-Exchange-2010-MailboxStore For hosts that run Exchange Server 2010 and hold the Mailbox Server role
TA-Exchange-2013-ClientAccess For hosts that run Exchange Server 2013 and hold the Client Access Server role
TA-Exchange-2013-Mailbox For hosts that run Exchange Server 2013 and hold the Mailbox Server role
TA-Windows-2003-Exchange-IIS For hosts that run Windows Server 2003, have Exchange Server 2007 installed, and hold the Exchange 2007 Client Access Server role
TA-Windows-2008R2-Exchange-IIS For hosts that run Windows Server 2008 R2, have Exchange Server 2010 installed, and hold the Exchange 2010 Client Access Server role
TA-Windows-2012-Exchange-IIS For hosts that run Windows Server 2012, have Exchange Server 2013 installed, and hold the Exchange 2013 Client Access Server role
TA-SMTP-Reputation E-mail sender reputation, requires a server that has an outbound connection to the Internet

Download the Splunk Add-ons for Exchange

Like the Splunk Add-ons for Windows DNS, the Splunk Add-ons for Exchange come with the Splunk App for Microsoft Exchange installation package.

If you have already completed the "Get Domain Name Service data" portion of setup, you already have the Splunk App for Microsoft Exchange installation package and can skip this section.

Otherwise, you can download the Splunk App for Microsoft Exchange from Splunk Apps.

Download the app and save it to an accessible place on the deployment server:

1. In a web browser, proceed to the Splunk App for Microsoft Exchange download page.

2. Click the download link to begin the download process.

  • Make sure you download the latest version of the app.
  • You might need to sign in with your Splunk account before the download starts.

3. When prompted, choose an accessible location on your deployment server to save the download. Do not attempt to run the download.

4. Use an archive utility such as WinZip to unarchive the file to an accessible location.

Configure the Splunk Add-ons for Exchange

The Splunk Add-ons for Exchange do not require any configuration edits by default. When you deploy them onto the Exchange servers, they immediately begin collecting data as long as you have configured local PowerShell script execution.

What's next?

You have downloaded the Splunk App for Microsoft Exchange and can now access the Splunk Add-ons for Exchange. The next step involves deploying those add-ons into the deployment clients that you install on your Exchange servers.

Last modified on 02 June, 2015
Configure Exchange servers   Deploy the Splunk Add-ons for Exchange

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.1.0, 3.1.1, 3.1.2, 3.1.3, 3.2.0, 3.2.1


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters