On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL).
For documentation on the most recent version, go to the latest release.
POP3 and IMAP4
This page shows you information about the POP3 and IMAP4 client access methods.
The page has panels that display these methods' top users by protocal. Also included is a panel that shows the total number of logins over time, in connections per minute.
By default, the time period for all of these panels is the last 24 hours. You can change this by editing the dashboard, however.
The page uses IIS logs to produce the events it displays.
How to use this page
- To find out more about an POP3 or IMAP4 top user, click on that user in the "Top POP3 Users" or "Top IMAP4 Users" list. The Splunk App for Microsoft Exchange loads the "User Behavior Overview" page and filters results to the specified user.
- If you click on a node in the "Logins over Time" line chart, the Splunk App for Microsoft Exchange brings up the base search that produced the events at that point in time, along with the events that occurred at that point.
Last modified on 04 April, 2017
| Exchange Web Services | Environment Overview |
This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1, 3.5.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3
Download manual
Feedback submitted, thanks!