Download and configure the Splunk Add-ons for Exchange

This topic discusses how to download and configure the Splunk Add-ons for Microsoft Exchange and deploy them to your deployment clients so that they forward Exchange data to the Splunk App for Microsoft Exchange indexer.

The Splunk App for Microsoft Exchange download package comes with a suite of add-ons that collect Exchange data data (as well as other data types, previously discussed.) When you deploy the add-ons to your Exchange server deployment clients, the clients collect Exchange data and forward it to the central Splunk App for Microsoft Exchange indexer.

More information about the Exchange add-ons

The following table lists the Exchange add-ons that come with the Splunk App for Microsoft Exchange, and what each add-on provides.

Add-on:	Description:
TA-Exchange-2007-CAS	For hosts that run Exchange Server 2007 and hold the Client Access Server role
TA-Exchange-2007-HubTransport	For hosts that run Exchange Server 2007 and hold the Hub Transport server role
TA-Exchange-2007-MailboxStore	For hosts that run Exchange Server 2007 and hold the Mailbox Server role
TA-Exchange-2010-CAS	For hosts that run Exchange Server 2010 and hold the Client Access Server role
TA-Exchange-2010-HubTransport	For hosts that run Exchange Server 2010 and hold the Hub Transport server role
TA-Exchange-2010-MailboxStore	For hosts that run Exchange Server 2010 and hold the Mailbox Server role
TA-Exchange-2013-ClientAccess	For hosts that run Exchange Server 2013 and hold the Client Access Server role
TA-Exchange-2013-Mailbox	For hosts that run Exchange Server 2013 and hold the Mailbox Server role
TA-Windows-2003-Exchange-IIS	For hosts that run Windows Server 2003, have Exchange Server 2007 installed, and hold the Exchange 2007 Client Access Server role
TA-Windows-2008R2-Exchange-IIS	For hosts that run Windows Server 2008 R2, have Exchange Server 2010 installed, and hold the Exchange 2010 Client Access Server role
TA-Windows-2012-Exchange-IIS	For hosts that run Windows Server 2012, have Exchange Server 2013 installed, and hold the Exchange 2013 Client Access Server role
TA-SMTP-Reputation	E-mail sender reputation, requires a server that has an outbound connection to the Internet

Download the Splunk Add-ons for Exchange

Like the Splunk Add-ons for Windows DNS, the Splunk Add-ons for Exchange come with the Splunk App for Microsoft Exchange installation package.

If you have already completed the "Get Domain Name Service data" portion of setup, you already have the Splunk App for Microsoft Exchange installation package and can skip this section.

Otherwise, you can download the Splunk App for Microsoft Exchange from Splunk Apps.

Download the app and save it to an accessible place on the deployment server:

1. In a web browser, proceed to the Splunk App for Microsoft Exchange download page.

2. Click the download link to begin the download process.

• Make sure you download the latest version of the app.
• You might need to sign in with your Splunk account before the download starts.

3. When prompted, choose an accessible location on your deployment server to save the download. Do not attempt to run the download.

4. Use an archive utility such as WinZip to unarchive the file to an accessible location.

Configure the Splunk Add-ons for Exchange

The Splunk Add-ons for Exchange do not require any configuration edits by default. When you deploy them onto the Exchange servers, they immediately begin collecting data as long as you have configured local PowerShell script execution.

What's next?

You have downloaded the Splunk App for Microsoft Exchange and can now access the Splunk Add-ons for Exchange. The next step involves deploying those add-ons into the deployment clients that you install on your Exchange servers.