https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-Mailbox-Audit-Logs/m-p/102274#M21458 <P>In version 2.1.2 of the "Splunk App for Microsoft Exchange", the <STRONG>TA-Exchange-2010-MailboxStore</STRONG> has a scripted input that collects the mailbox audit logs into a sourcetype called <STRONG>MSExchange:2010:MailboxAudit</STRONG></P> Sun, 16 Mar 2014 19:32:07 GMT gpullis 2014-03-16T19:32:07Z https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-Mailbox-Audit-Logs/m-p/102273#M21457 <P>Is Splunk able to collect exchange 2010 mailbox audit logs from each mailbox and how? The mailbox audit logs are written within each application and stored on each mailbox. Since the mailbox audit logs are not written to windows event folder or a flat file can splunk collect these logs from the mailboxes to a central location and how can it do that?</P> Sun, 21 Apr 2013 18:36:28 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-Mailbox-Audit-Logs/m-p/102273#M21457 vikdiva 2013-04-21T18:36:28Z https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-Mailbox-Audit-Logs/m-p/102274#M21458 <P>In version 2.1.2 of the "Splunk App for Microsoft Exchange", the <STRONG>TA-Exchange-2010-MailboxStore</STRONG> has a scripted input that collects the mailbox audit logs into a sourcetype called <STRONG>MSExchange:2010:MailboxAudit</STRONG></P> Sun, 16 Mar 2014 19:32:07 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-2010-Mailbox-Audit-Logs/m-p/102274#M21458 gpullis 2014-03-16T19:32:07Z