About the Splunk Add-ons for Microsoft Exchange

The Splunk Add-ons for Microsoft Exchange let you collect Exchange data from the hosts in your Exchange Server environment. The add-ons have been designed to work with the Splunk App for Microsoft Exchange, but are now available as a separate download from Splunkbase. You can use them with the app or to provide knowledge objects for Splunk Enterprise dashboards that you design by yourself.

Get the add-ons

The Splunk Add-ons for Microsoft Exchange area available from Splunkbase.

Install the add-ons

The add-ons require configuration before they can be used. Each add-on must be configured for the version of Exchange Server or Windows Server (for TA-Windows-Exchange-IIS) that you run in your Exchange Server environment. See the "Configure" topics in the chapter for each add-on for installation instructions.

Add-on package contents

The Splunk Add-ons for Microsoft Exchange come in a bundle and include the following:

TA-Exchange-ClientAccess

This add-on collects Exchange data from Exchange Server hosts that hold the Client Access Server role. It has support for Exchange Server 2007, 2010, 2013, and 2016. See Overview of TA-Exchange-ClientAccess.

TA-Exchange-Mailbox

This add-on collects Exchange data from Exchange Server hosts that hold the Mailbox Store/Mailbox Server roles. It has support for Exchange Server 2007, 2010, 2013, and 2016. See Overview of TA-Exchange-Mailbox.

TA-Exchange-HubTransport

This add-on collects Exchange data from Exchange Server hosts that hold the Hub Transport role. It has support for Exchange Server 2007 and 2010. Exchange Server versions 2013 and 2016 do not have this role. See Overview of TA-Exchange-Mailbox.

TA-Windows-Exchange-IIS

This add-on collects Internet Information Server (IIS) data from Exchange Server hosts that hold the Client Access Server role. It has support for Windows Server 2003, 2008 R2, and 2012 R2 and must be configured for the version of Windows Server that the Exchange Client Access Server hosts run. See Overview of TA-Windows-Exchange-IIS.