Splunk® App for Microsoft Exchange (EOL)

Splunk App for Microsoft Exchange Reference

Acrobat logo Download manual as PDF


On October 22 2021, the Splunk App for Microsoft Exchange will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app is migrating to a content pack in Data Integrations. Learn about the Content Pack for Microsoft Exchange.
This documentation does not apply to the most recent version of Splunk® App for Microsoft Exchange (EOL). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

User Behavior Overview

Exch 30 useroverview.png

This page displays information about Exchange users' behavior within the Exchange network.

The page has several panels:

  • The "Recent Activity" panel shows the users who have used the system most recently, and includes a usage sparkline and information on when they last logged on, what IP address they logged on from, and the geographical location of that IP address.
  • The "Mailbox Information" and "Mailbox Growth" panels show information about mailbox databases and mailbox growth over time.
  • The "Top Folders" panel shows information on the largest folders in the Exchange network, sorted by disk usage.
  • The "Desktop Usage" and "Mobile OS Usage" panels show information on the top desktop and mobile operating systems, based on percentage of use.
  • The "Browser Usage" panel shows browser usage, again based on percentage of use.
  • Finally, the "Database History" panel shows the latest updates to the active Exchange mailbox databases, based on update time.

How to use this page

You can configure this page to filter to a specific user or set of users.

  • To specify a user, enter that user's email address in the "Username" text box at the top of the page, set an appropriate time period using the time range picker, then click "Search".
  • For each list panel, you can sort the contents by clicking on the column header button. Clicking more than once on the same column header toggles between ascending and descending sort based on that column.
  • You can mouse over the line in the "Mailbox Growth" are chart to see individual data points for the chosen metric.
  • You can click on any point in the chart to load the base search that produced the results for the chart at that time.
Last modified on 04 April, 2017
PREVIOUS
Message Activity by Domain 		  NEXT
Client Service Overview

This documentation applies to the following versions of Splunk® App for Microsoft Exchange (EOL): 3.4.2, 3.4.3, 3.4.4, 3.5.0, 3.5.1, 3.5.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3

Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters