Splunk® App for Microsoft Exchange (EOL)

Deploy and Use the Splunk App for Microsoft Exchange

On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.

Configure NetBIOS to DNS domain name translation

To make sure that the Splunk App for Microsoft Exchange monitors all connections into Exchange properly, you must edit the NetBIOS-to-DNS domain name alias file. This file is located at %SPLUNK_HOME%\etc\apps\splunk_app_microsoft_exchange\local\domain_aliases.csv.

Create and/or edit this file to add aliases for your NetBIOS domain names to your DNS-based domain names.

You must create this file if it does not exist. The file must contain entries similar to the following: 

	UNKNOWN,spl.com
	SPL,spl.com

Each line consists of two comma-separated strings. The first string is the NetBIOS name that you want to translate, and the second string is the DNS domain name that you want to translate the NetBIOS name to. In the example above:

SPL,spl.com means "Treat connections from the NetBIOS domain SPL as if they came from the DNS domain spl.com.

Important: When editing this file, make sure to always retain the UNKNOWN entry, as any unqualified user names will be set to UNKNOWN.

Last modified on 02 June, 2014
Install a license   Install the central Splunk for Microsoft Exchange app instance

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.0, 3.0.1, 3.0.2, 3.0.3

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters