About the Splunk App for Microsoft Exchange

This version of the app has been superseded.

The Splunk App for Microsoft Exchange version 2.1.2 has been superseded by the Splunk App for Microsoft Exchange v3.0. If you run the Splunk App for Microsoft Exchange version 2.1.2 and want to upgrade the Splunk Enterprise instances that run the app to version 6.1 or later, you must also install version 3.0 of the app to continue to receive support. Follow the instructions in "Upgrade the Splunk App for Microsoft Exchange" to move to the new version. If you run Splunk Enterprise 6.0 and earlier, you can continue to use version 2.1.2 of the app. When you upgrade to version 6.1 of Splunk Enterprise, you must then move over to version 3.0 of the app to continue to receive support.

The Splunk App for Microsoft Exchange consumes logs from your Microsoft Exchange systems to give you deep visibility into the health and performance of your Microsoft Exchange environment, from Edge and Hub Transport servers to the Client Access servers and the Mailbox Store itself.

It includes components that let you monitor system availability and client activity. It helps you immediately answer the eternal question facing every Exchange admin: "what happened to my email?".

Use the Splunk App for Microsoft Exchange to:

• Identify infrastructure problems, such as non-running services and load issues
• Monitor the performance of all servers throughout your messaging environment
• Track messages throughout your messaging environment
• Monitor client usage, including mobility usage via ActiveSync or Blackberry Enterprise Server
• Monitor security events, such as virus outbreaks and anomalous logons
• Track administrative changes to the environment
• Analyze long-term mail operations trends
• Plan for capacity expansion
• Monitor your organization's outbound email sender reputation

Important: Be sure to read and understand the Splunk App for Microsoft Exchange's platform and hardware requirements before downloading and installing the app. Also, review what data the app collects and learn about additional deployment options and considerations.

How does it work?

Splunk universal forwarders gather logs and performance metrics from the following components of your Microsoft Exchange deployment:

• Edge Transport
• Hub Transport
• Client Access Server (CAS)
• Mailbox Server
• Blackberry Enterprise Server (BES) (optional)

and forward them to a central Splunk instance that runs Splunk App for Microsoft Exchange. The app provides pre-built reports and dashboards that allow you to review the status of your Exchange mail services.

How do I get it?

The Splunk for Microsoft Exchange app is available for download.

How do I upgrade from a previous version?

If you are already running the Splunk App for Microsoft Exchange and want to upgrade, be sure to read "Upgrade the Splunk App for Microsoft Exchange" for conceptual information, important differences between versions, and specific upgrading instructions.

For information on what's new and what's been fixed from the previous version, as well as any known issues in this version, review the release notes.