Splunk® App for Microsoft Exchange (EOL)

Deploy and Use the Splunk Add-ons for Microsoft Exchange

Acrobat logo Download manual as PDF


On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

TA-Exchange-Mailbox inputs

The TA-Exchange-Mailbox add-on collects performance and Windows host monitoring data from Windows hosts that run Exchange Server and hold the Mailbox Store role. See Configure TA-Exchange-Mailbox to learn how to configure the add-on for your version of Exchange Server prior to deploying it to Exchange Server hosts.

The add-on includes the following data inputs:

Common data inputs

[WinHostMon://Processes]
[WinHostMon://Services]
[perfmon://Total_Processor_Time]
[perfmon://Processor]
[perfmon://System]
[perfmon://Available_Memory]
[perfmon://Memory]
[perfmon://DotNET_CLR_Memory]
[perfmon://Network_Utilization]
[perfmon://TCPv4]
[perfmon://TCPv6]
[perfmon://MSExchange_Search_Indices]
[perfmon://MSExchange_Control_Panel]
[perfmon://Process_Microsoft.Exchange.Search.ExSearch]
[perfmon://Process_MSExchangeMailboxAssistants]
[perfmon://Process_msftesq]
[perfmon://MSExchange_Assistants_Per_Assistant]
[perfmon://MSExchange_Assistants_Per_DB]
[perfmon://MSExchange_Store_Interface_Total]
[perfmon://MSExchange_Store_Interface]
[perfmon://MSExchange_Mail_Submission]
[perfmon://MSExchange_ADAccess_Processes]
[perfmon://LogicalDisk]
[perfmon://MSExchangeIS]
[perfmon://MSExchange_Database_Edge_Transport]
[perfmon://MSExchange_Database_NoInstances]
[perfmon://MSExchange_Resourcebooking]
[perfmon://MSExchange_IS_Public]
[perfmon://MSExchange_Replication]
[perfmon://MSExchange_Calendarattendant]
[perfmon://MSExchange_IS_Mailbox]

Exchange Server 2007 data inputs

[WinEventLog://Exchange Auditing]
[perfmon://MSExchangeIS_Mailbox_2007]
[perfmon://MRM_Assistants_2007]
[perfmon://MSExchange_ADAccess_Caching_2007]
[perfmon://MSExchange_ADAccess_DC_2007]
[perfmon://MSExchangeIS_Client_2007]
[perfmon://MRM_Counters_2007]
[perfmon://MSExchange_Database_2007]
[perfmon://MSExchange_Database_Instances_2007]
[script://.\bin\exchangepowershell.cmd v8.0 get-databasestats_2007.ps1]
[script://.\bin\exchangepowershell.cmd v8.0 get-folderstats_2007.ps1]
[script://.\bin\exchangepowershell.cmd v8.0 get-publicfolderstats_2007.ps1]
[script://.\bin\exchangepowershell.cmd v8.0 get-hoststats_2007.ps1]
[script://.\bin\exchangepowershell.cmd v8.0 get-mailboxstats_2007.ps1]

Exchange Server 2010 data inputs

[perfmon://MSExchangeIS_Mailbox_2010]
[perfmon://MSExchange_Database_2010]
[perfmon://MSExchange_Database_Instances_2010]
[perfmon://MSExchangeIS_Client_2010]
[perfmon://MRM_Assistants_2010]
[perfmon://MSExchange_ADAccess_Caching_2010]
[perfmon://MRM_Counters_2010]
[perfmon://MSExchange_ADAccess_DC_2010]
[script://.\bin\exchangepowershell.cmd v14 get-publicfolderstats_2010.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-databasestats_2010.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-folderstats_2010.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-distlists_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-hoststats_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 read-audit-logs_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 read-mailbox-audit-logs_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-mailboxstats_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-inboxrules_2010_2013.ps1]

Exchange Server 2013 and 2016 data inputs

[perfmon://OWA]
[perfmon://ActiveSync]
[perfmon://MSExchangePop3]
[perfmon://MSExchangeImap4]
[perfmon://Disk]
[perfmon://MSExchangeIS_Store]
[perfmon://MSExchange_Queue_Lengths]
[perfmon://MSExchange_Transport_Dumpster]
[perfmon://MSExchange_Store_Driver]
[perfmon://MSExchange_SmtpReceive]
[perfmon://MSExchange_SmtpSend]
[perfmon://MSExchange_Extensibility_Agents]
[perfmon://MSExchangeIS_Client_2013]
[perfmon://MSExchange_ADAccess_Caching_2013]
[perfmon://MRM_Counters_2013]
[perfmon://MSExchange_Database_2013]
[perfmon://MSExchange_Database_Instances_2013]
[perfmon://MSExchange_ADAccess_DC_2013]
[perfmon://MRM_Assistants_2013]
[monitor://C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking]
[script://.\bin\exchangepowershell.cmd v15 get-databasestats_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 get-folderstats_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 get-distlists_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 get-hoststats_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 read-audit-logs_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 read-mailbox-audit-logs_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 get-mailboxstats_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2013.ps1]
Last modified on 11 April, 2019
PREVIOUS
Overview of TA-Exchange-Mailbox
  NEXT
Configure TA-Exchange-Mailbox

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters