All Apps and Add-ons

Both Splunk Apps for Microsoft Exchange and Windows Infrastructure have overlapping saved searches. Should I use on or the other?

BP9906
Builder

I have both apps installed and there are many saved searches doing the same thing. Do I need to just use one or the other or are there some features missing from Exchange that are in Infrastructure?

Searches from these 2 apps are consuming most of the resources on my 3 search head cluster members. 😞

0 Karma

ntankersley_spl
Splunk Employee
Splunk Employee

You should only need Exchange, Windows Infrastrcuture comes bundles as part of the Exchange App.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...