Splunk® App for Microsoft Exchange (EOL)

Deploy and Use the Splunk App for Microsoft Exchange

Acrobat logo Download manual as PDF


On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Release notes

This topic contains information on new features, known issues, and updates as we version the Splunk App and Technology Add-ons for Microsoft Exchange.

The latest version of the Splunk App for Microsoft Exchange was released on Thursday, February 26, 2015.

What's new

Here's what's new in the latest version of the Splunk App for Microsoft Exchange:

  • Bug fixes.
  • Internal improvements have been made to better handle testing, event generation, and CIM compliance. (TAG-3183, TAG-8599, TAG-8937, TAG-9030)
  • The interface for enabling and disabling hosts has been improved. (TAG-8818, TAG-8820)
  • The user experience on the Perfmon page has been improved. (TAG-2908)
  • The app no longer requires you to have Active Directory data available to pass data prerequisite checks. (TAG-8916, TAG-9012)
  • The app no longer includes disabled hosts in service health scores. When you disable a host, the score changes immediately to reflect the absence of that host in the score computation. (TAG-8796)

Current known issues

The Splunk App for Microsoft Exchange has the following known issues:

  • In certain cases, the app setup prerequisite check prevents you from proceeding even though all prerequisite checks have passed. To work around the problem, confirm that the Splunk Add-on for Windows and the Splunk Supporting Add-on for Active Directory (SA-LDAPSearch) have been activated (and not just installed) in the Apps screen in Splunk Web. (TAG-9012)
  • The app does not currently work with search head pools or search head clusters. (TAG-8776, TAG-9208)
  • Customers with Exchange Server 2007 and Exchange Server 2010 environments might see services in a "Critical" (red) state in the Service Analyzer and Service Health pages unless they disable components for the Transport Handling and Mailbox roles. See "Known Issue: Disable Transport and Mailbox components in Service Analyzer for Exchange Server 2007 and Server 2010 environments." (TAG-8844)
  • The app might not work correctly if you use browser plug-ins that block content such as AdBlock. As a workaround, remove the plug-in or disable the plug-in for the Splunk instance. (TAG-8731)
  • When you disable hosts in the Service Health configuration page, after you return to the Service Analyzer page, the hosts reappear as enabled. This is a temporary issue, as the enabled/disabled list gets updated at a set schedule. Wait for a while and then try the operation again. (TAG-8825, TAG-8865)
  • When you add a server to the "Autodiscover" service, it does not show up in that service right away. This is a temporary issue. Wait for a while and then try the operation again. (TAG-8831, TAG-8865)
  • The "Max" and "Min" fields in the "Configure Thresholds" dialog box might not accurately represent the actual maximum and minimum thresholds for the active component. This is a cosmetic issue as the thresholds get saved when you click "Save" to exit the dialog. (TAG-8826)
  • The dashboard builder does not work properly with Internet Explorer version 8 or earlier. To work around the problem, use another Splunk Enterprise-supported browser. (MSAPP-2259, MSAPP-2277)
  • Some minor artifacts occur when you collapse the "Add Panels" sidebar on the Dashboard Builder page. (MSAPP-2109)

Change log (what's been fixed)

  • A cosmetic error where a disabled swim lane in Service Analyzer could not be re-enabled was fixed. (TAG-8790)
  • A problem where the Perfmon counter table failed to show up intermittently when using page from Internet Explorer version 11 was fixed. (TAG-8914)
  • The Windows Overview page no longer references the incorrect "windows_events" event type. (TAG-8822)
  • The "Host Performance" graph no longer goes to a non-existing page when you click on it to drill down (It no longer attempts to go to any page.) (TAG-9079)
  • The "Client Service Overview" page now correctly drills down to the appropriate service pages. (TAG-9078)
  • The "Exchange Messaging" event object in the Microsoft Exchange data model no longer references an index. (TAG-8907)
  • Some inconsistencies in the documentation were fixed, and the upgrade procedure has been improved. (TAG-9056)
Last modified on 20 March, 2015
PREVIOUS
Best practices guide
  NEXT
Known Issue: Disable Transport Handling and Mailbox components in Service Analyzer for Exchange Server 2007 and Server 2010 environments

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.1.2


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters