Install a license

In order to use the Splunk App for Microsoft Exchange, you need to have a valid license. This is in addition to the license(s) you need to have to use Splunk Enterprise.

When you first log into the Splunk App for Microsoft Exchange, you receive a warning prompt similar to the following:

Note: This also happens if the Splunk App for Microsoft Exchange cannot find a valid license.

To fix this problem, follow these steps:

1. Contact Splunk Sales. Tell them how much data per day you plan to use with the Splunk App for Microsoft Exchange.

2. Once you have been provided an invoice, pay the designated amount. Splunk will send you a license key.

3. Once you receive the license key, install the license into the Splunk Enterprise server that hosts your licenses.

Frequently Asked Questions

How do I know what size license I will need?

When you contact Splunk Sales, they can help you determine the correct license quota based on the number of servers you have in your environment and what data you want to index.

Which server hosts the licenses?

The Splunk Enterprise server that hosts your Splunk licenses (also known as the license master) depends on how you have configured the central Splunk App for Microsoft Exchange instance.

In many cases, Splunk Enterprise holds licenses on the server that performs indexing for the Splunk App for Microsoft Exchange. Depending on how you configured the central Splunk App for Microsoft Exchange instance, the master license server might be on a different Splunk Enterprise instance within the deployment.

What happens if I don't have a Splunk App for Microsoft Exchange license?

The Splunk App for Microsoft Exchange requires that you have a license to view your Exchange data. If you don't have a license, use the instructions above to get a valid license key from Splunk Support. The Splunk App for Microsoft Exchange disables pages in the Exchange module if no valid license is present.

What happens if I violate my license?

If you violate your Splunk App for Microsoft Exchange license, the app gives you a warning that you have exceeded your daily indexing limit. If you continue to violate your license within a 30-day period, you might be prevented from viewing your Exchange data. If that happens, you need to contact Splunk Support for assistance in lifting the restriction.

Does the Splunk App for Microsoft Exchange change the amount of data I can index in Splunk Enterprise?

No. It does not increase or decrease the amount of indexing capacity on your Splunk Enterprise servers.