Splunk® App for Microsoft Exchange

Deploy and Use the Splunk App for Microsoft Exchange

Acrobat logo Download manual as PDF


On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of MSExchange. Click here for the latest version.
Acrobat logo Download topic as PDF

Release notes for Splunk App for Microsoft Exchange

The Splunk App for Microsoft Exchange version 4.0.3 was released on July 23, 2021.

What's new

The Splunk App for Microsoft Exchange version 4.0.3 now supports the Splunk Add-on for Windows version 8.1.2

Occurrences of biased terms such as master, slave, blacklist, and whitelist have been replaced with appropriate non-biased terms. The occurrences of biased terms that are Splunk platform references or present in the third-party library have not been removed.

The acceleration of the data models "Microsoft Exchange" and "MSExchange Messaging" are disabled by default. Enable acceleration for these data models to populate the data on the app dashboards. See Enable Data model acceleration to learn how to enable data model acceleration.

The static CSV lookup ExchangeComponentBlacklist from Exchange App has been renamed to ExchangeComponentDenylist as a part of this release to avoid use of biased terms in the add-on. Update the lookup name if you are using it in custom searches.

Fixed issues

This version of the Splunk App for Microsoft Exchange has the following reported fixed issues.


Known issues

This version of the Splunk App for Microsoft Exchange has the following reported known issues and workarounds.


Date filed Issue number Description
2021-08-02 EXC-2752 Savedsearch and eventtype not working
Last modified on 16 August, 2021
PREVIOUS
Best practices guide
  NEXT
Third-party software attributions/credits

This documentation applies to the following versions of Splunk® App for Microsoft Exchange: 4.0.3


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters