Splunk® App for Microsoft Exchange (EOL)

Deploy and Use the Splunk App for Microsoft Exchange

On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.

Release notes

This topic contains information on new features, known issues, and updates as we version the Splunk App and Technology Add-ons for Microsoft Exchange.

What's new

Here's what's new in the latest version of the Splunk App for Microsoft Exchange:

  • Numerous bug fixes.
  • New technology add-ons (TAs) for Microsoft Exchange 2013.
  • Updated TAs for Microsoft Exchange 2010.
  • New data inputs for Mailbox Auditing, Distribution Lists, Inbox Rules and Client Access Server (CAS) throttling policies.
  • New dashboards for Internal Spamming Reports and Distribution List Expansions.
  • Support for Blackberry Enterprise Server and Forefront Security for Exchange has been deprecated.

For more information about these updates, read "Upgrade the Splunk App for Microsoft Exchange."

Current known issues

The Splunk App for Microsoft Exchange has the following known issues:

  • The Splunk App for Microsoft Exchange does not currently work with Splunk universal forwarder versions 5.0 and later. If you currently run the Splunk App for Microsoft Exchange, do not upgrade any of the universal forwarders in your deployment. If you have already upgraded your forwarders, then downgrade them to version 4.3.5 by uninstalling and reinstalling.
  • The login statistics for Post Office Protocol version 3 (POP3) and Internet Message Access Protocol version 4 revision 1 (IMAP4) now properly include the IP address for each login. (MSEXCH-2)
  • In Exchange 2010 environments with Service Pack 2 (SP2) installed, the app UI does not properly display some user and server information. Additionally, Exchange servers in those environments log "Cannot load Windows Powershell snap-in" to splunkd.log because of missing PowerShell extensions. Review "Issues with Splunk App for Microsoft Exchange and MS Exchange 2010 SP2" for additional information and a workaround. (MSEXCH-242)
  • Older versions of the universal forwarder might not correctly get some Windows events. To fix this issue, upgrade your forwarders to the latest version. (SPL-51312)
  • Some of the technology add-ons included with the Splunk App for Microsoft Exchange can cause high memory usage on Exchange servers. To fix the problem, upgrade to version 2.1.1. (MSAPP-1530)

Change log (what's been fixed)

  • The "Drive Free Space" collection now properly counts disk space usage on mount points against the active mailbox database size view. (MSEXCH-3)
Last modified on 10 December, 2013
Troubleshoot the Splunk App for Microsoft Exchange  

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 2.0

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters