Overview of TA-Exchange-HubTransport
The TA-Exchange-HubTransport add-on comes with the Splunk Add-on for Microsoft Exchange package. It collects Performance Monitoring and Windows Host Monitoring data from Exchange Server hosts that hold the Hub Transport Exchange Server role. It supports collection of data from Exchange Server 2010. Exchange Server 2013, Exchange Server 2016 and Exchange Server 2019 does not have this role, as it has been integrated into the Client Access and Mailbox Server roles.
The add-on should be installed on a universal forwarder that has been installed on the Exchange Server host. Because the add-on collects data for all supported versions of Exchange Server by default, when you install the add-on you must configure it to collect only the data for the version of Exchange Server that you run.
Use a deployment server to manage distribution of this add-on to your Exchange Server hosts.
This documentation applies to the following versions of Splunk® App for Microsoft Exchange: 3.5.2, 4.0.0, 4.0.1