Getting Data In

Exchange 2010 requirements to send logs

support88
New Member

Hi,

What are the requirements for exchange 2010 server to send logs? My current setup is

Exchange Server---> Windows Forwarder---> Splunk Server

Appreciate your help.

Loi

Tags (1)
0 Karma

MarioM
Motivator

you need to install the TAs corresponding to the exchange roles where the universal forwarder is running then restart the splunkforwarder service.

You can find the TAs in the exchange apps:

Splunk_for_Exchange\appserver\addons\

TA-Exchange-2010-CAS

TA-Exchange-2010-HubTransport

TA-Exchange-2010-MailboxStore

TA-Windows-2008R2-Exchange-IIS

And the TA Windows Splunk for Windows technology add-on

The doc will give you more details: deploy the Splunk App for Microsoft Exchange configurations to Splunk universal forwarders

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...