Overview of TA-SMTP-Reputation
The TA-SMTP-Reputation add-on comes with the Splunk Add-on for Microsoft Exchange package. E-mail sender reputation requires a server that has an outbound connection to the Internet. It supports a collection of data from Exchange Server 2010, Exchange Server 2013, Exchange Server 2016 and Exchange Server 2019.
Install the add-on on a universal forwarder that has been installed on the Exchange Server host. Because the add-on collects data for all supported versions of Exchange Server by default, when you install the add-on you must configure it to collect only the data for the version of Exchange Server that you run. Use a deployment server to manage the distribution of this add-on to your Exchange Server hosts.
This documentation applies to the following versions of Splunk® App for Microsoft Exchange: 3.5.2, 4.0.0, 4.0.1