Splunk® App for Microsoft Exchange (EOL)

Deploy and Use the Splunk App for Microsoft Exchange

On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.

Release notes for Splunk App for Microsoft Exchange

The Splunk App for Microsoft Exchange version 4.0.3 was released on July 23, 2021.

What's new

The Splunk App for Microsoft Exchange version 4.0.3 now supports the Splunk Add-on for Windows version 8.1.2

Occurrences of biased terms such as master, slave, blacklist, and whitelist have been replaced with appropriate non-biased terms. The occurrences of biased terms that are Splunk platform references or present in the third-party library have not been removed.

The acceleration of the data models "Microsoft Exchange" and "MSExchange Messaging" are disabled by default. Enable acceleration for these data models to populate the data on the app dashboards. See Enable Data model acceleration to learn how to enable data model acceleration.

The static CSV lookup ExchangeComponentBlacklist from Exchange App has been renamed to ExchangeComponentDenylist as a part of this release to avoid use of biased terms in the add-on. Update the lookup name if you are using it in custom searches.

Fixed issues

This version of the Splunk App for Microsoft Exchange has the following reported fixed issues.


Known issues

This version of the Splunk App for Microsoft Exchange has the following reported known issues and workarounds.


Date filed Issue number Description
2021-08-02 EXC-2752 Savedsearch and eventtype not working
Last modified on 16 August, 2021
Best practices guide   Third-party software attributions/credits

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 4.0.3

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters