https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-requirements-to-send-logs/m-p/101317#M21225 <P>you need to install the TAs corresponding to the exchange roles where the universal forwarder is running then restart the splunkforwarder service.</P> <P>You can find the TAs in the exchange apps:</P> <PRE><CODE>Splunk_for_Exchange\appserver\addons\ TA-Exchange-2010-CAS TA-Exchange-2010-HubTransport TA-Exchange-2010-MailboxStore TA-Windows-2008R2-Exchange-IIS </CODE></PRE> <P>And the TA Windows <A href="http://splunk-base.splunk.com/apps/28933/splunk-for-windows-technology-add-on">Splunk for Windows technology add-on</A></P> <P>The doc will give you more details: <A href="http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Deployconfigurationsforallserverroles">deploy the Splunk App for Microsoft Exchange configurations to Splunk universal forwarders</A></P> Mon, 28 Jan 2013 09:08:49 GMT MarioM 2013-01-28T09:08:49Z https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-requirements-to-send-logs/m-p/101316#M21224 <P>Hi,</P> <P>What are the requirements for exchange 2010 server to send logs? My current setup is</P> <P>Exchange Server---&gt; Windows Forwarder---&gt; Splunk Server</P> <P>Appreciate your help.</P> <P>Loi</P> Mon, 28 Jan 2013 04:15:57 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-requirements-to-send-logs/m-p/101316#M21224 support88 2013-01-28T04:15:57Z https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-requirements-to-send-logs/m-p/101317#M21225 <P>you need to install the TAs corresponding to the exchange roles where the universal forwarder is running then restart the splunkforwarder service.</P> <P>You can find the TAs in the exchange apps:</P> <PRE><CODE>Splunk_for_Exchange\appserver\addons\ TA-Exchange-2010-CAS TA-Exchange-2010-HubTransport TA-Exchange-2010-MailboxStore TA-Windows-2008R2-Exchange-IIS </CODE></PRE> <P>And the TA Windows <A href="http://splunk-base.splunk.com/apps/28933/splunk-for-windows-technology-add-on">Splunk for Windows technology add-on</A></P> <P>The doc will give you more details: <A href="http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/Deployconfigurationsforallserverroles">deploy the Splunk App for Microsoft Exchange configurations to Splunk universal forwarders</A></P> Mon, 28 Jan 2013 09:08:49 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-requirements-to-send-logs/m-p/101317#M21225 MarioM 2013-01-28T09:08:49Z