Release notes for Splunk App for Microsoft Exchange
The Splunk App for Microsoft Exchange version 4.0.3 was released on July 23, 2021.
The Splunk App for Microsoft Exchange version 4.0.3 now supports the Splunk Add-on for Windows version 8.1.2
Occurrences of biased terms such as master, slave, blacklist, and whitelist have been replaced with appropriate non-biased terms. The occurrences of biased terms that are Splunk platform references or present in the third-party library have not been removed.
The acceleration of the data models "Microsoft Exchange" and "MSExchange Messaging" are disabled by default. Enable acceleration for these data models to populate the data on the app dashboards. See Enable Data model acceleration to learn how to enable data model acceleration.
The static CSV lookup ExchangeComponentBlacklist from Exchange App has been renamed to ExchangeComponentDenylist as a part of this release to avoid use of biased terms in the add-on. Update the lookup name if you are using it in custom searches.
This version of the Splunk App for Microsoft Exchange has the following reported fixed issues.
This version of the Splunk App for Microsoft Exchange has the following reported known issues and workarounds.
|Date filed||Issue number||Description|
|2021-08-02||EXC-2752||Savedsearch and eventtype not working|
Best practices guide
Third-party software attributions/credits
This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 4.0.3
Feedback submitted, thanks!