Splunk® App for Microsoft Exchange

Deploy and Use the Splunk App for Microsoft Exchange

Download manual as PDF

This documentation does not apply to the most recent version of MSExchange. Click here for the latest version.
Download topic as PDF

About the Splunk App for Microsoft Exchange

Overview

The Splunk App for Microsoft Exchange gives you visibility into the health and performance of your Microsoft Exchange environment, from Edge and Hub Transport servers to the Client Access servers and the Mailbox Store itself.

The Splunk App for Microsoft Exchange includes components that let you monitor system availability and client activity. It helps you immediately answer the eternal question facing every Exchange admin: "what happened to my email?".

Use the Splunk App for Microsoft Exchange to:

  • Identify infrastructure problems, such as non-running services and load issues
  • Monitor the performance of all servers throughout your Exchange environment
  • Track messages throughout your messaging environment
  • Monitor client usage, including mobility usage via ActiveSync or Outlook Anywhere
  • Monitor security events, such as virus outbreaks and anomalous logons
  • Track administrative changes to the environment
  • Analyze long-term mail operations trends
  • Plan for capacity expansion
  • Monitor your organization's outbound email sender reputation

It also includes modules which allow you to monitor other aspects of your Windows network, including:

  • Microsoft Windows Server (through the separately available Splunk Add-on for Windows)
  • Microsoft Windows Server Active Directory (through the separately available Splunk Add-on for Microsoft Active Directory)

See the Splunk App for Microsoft Exchange platform and hardware requirements before downloading and attempting to install the app. Also, learn what data the app collects.

How does it work?

Splunk universal forwarders gather logs and performance metrics from the following components of your Microsoft Exchange deployment:

  • Edge Transport
  • Hub Transport
  • Client Access Server (CAS)
  • Mailbox Server
  • Windows Server (via the Splunk Add-on for Windows)
  • Active Directory

Splunk universal forwarders send them to a central Splunk instance that runs Splunk App for Microsoft Exchange. The app provides reports and dashboards that allow you to review the status of your Exchange mail services.

If you're using TA-Windows v6.0.0, you don't need TA_AD and TA_DNS. TA_AD and TA_DNS are merged with TA-Windows v6.0.0.

How do I get it?

The Splunk App for Microsoft Exchange is available as a paid download from Splunk Apps.

How do I install it?

The Splunk App for Microsoft Exchange has a revamped installation procedure. See "How to deploy the Splunk App for Microsoft Exchange" to read about it.

Does the app require its own license?

Yes. You must have a license for the app in addition to having a license for Splunk Enterprise.

How do I upgrade from a previous version?

How you upgrade from previous versions depends on a number of factors. Read How to upgrade the Splunk App for Microsoft Exchange to learn about the various upgrade scenarios for the app.

For information on what's new and what's been fixed from the previous version, as well as any known issues in this version, review the release notes.

  NEXT
New to Splunk?

This documentation applies to the following versions of Splunk® App for Microsoft Exchange: 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters