Inbound Messages

This page provides a snapshot of the rate of messages coming into your Exchange network. Inbound messages are messages that your Hub or Edge Transport servers receive into the network via the Simple Mail Transfer Protocol (SMTP). The dashboard uses Message Tracking logs to present this data.

The page has line charts that display both incoming message rate (in messages per minute) and volume (in kilobytes per second).

It also has panels that display the top sending IP addresses and domains, as well as the top recipients by message count and volume.

How to use this page

• If you click on a node in either of the line charts, the Splunk App for Microsoft Exchange brings up the base search that produced the events at that point in time, along with the events that occurred at that point.
• To learn about the activity of a top sending IP address, click the IP address's name in the "Top Sending IPs" list. The Splunk App for Microsoft Exchange loads the "Message Activity by IP Address" page for the selected IP address.
• To learn about the activity of a top sending domain, click the domain's name in the "Top Sending Domains" list. The Splunk App for Microsoft Exchange loads the "Message Activity by Domain" page for the selected domain.
• To learn about the activity of a top recipient, click the recipient's name in the "Top Recipients by Message Count" or "Top Recipients by Volume" list. The Splunk App for Microsoft Exchange loads the "Message Activity by User" page for the selected user.