Splunk® App for Microsoft Exchange (EOL)

Splunk App for Microsoft Exchange Reference

Acrobat logo Download manual as PDF


On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of MSExchange. Click here for the latest version.
Acrobat logo Download topic as PDF

Network Activity

Exch 33 NetworkActivity.png

How to use this page

Choose a list box to filter network activity based on that filter. You can either select an entry from the list box or select the search field and type in an entry. When you type in a string, the page only matches entries for events that have been collected previously.

You can choose or enter data from one of the following filters:

  • Host: Where the network transaction originated.
  • Direction: Whether the transaction was inbound or outbound from the local host.
  • Protocol: The protocol of the network activity (TCP or UDP).
  • Packet Type: The type of packet that was used in the transaction, one of "connect", "accept", or "transport".
  • Remote Host: Where the network transaction was destined.
  • Remote Port: The remote port that the network transaction used.
  • Local Port: The local port that the network transaction used.
  • Process Name: The program that initiated the network transaction.
  • User Name: The user that initiated the network transaction.

The Network Information pane shows all network transactions that apply to the filters you set. You can use the time picker in the upper right to limit the range of data that the panel shows.

Last modified on 04 April, 2017
PREVIOUS
Host Monitoring Services
  NEXT
Top Network Hosts and Processes

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1, 3.5.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters