https://community.splunk.com/t5/Getting-Data-In/Forwarding-Exchange-admin-logs/m-p/240293#M46688 <P>Hi,</P> <P>I want to forward Exchange <EM>admin</EM> logs to my Splunk server. I installed a universal forwarder on my Exchange server. Which configuration should I do in the GUI while selecting logs/log types?</P> Fri, 06 May 2016 14:48:05 GMT furkan_caliskan 2016-05-06T14:48:05Z https://community.splunk.com/t5/Getting-Data-In/Forwarding-Exchange-admin-logs/m-p/240293#M46688 <P>Hi,</P> <P>I want to forward Exchange <EM>admin</EM> logs to my Splunk server. I installed a universal forwarder on my Exchange server. Which configuration should I do in the GUI while selecting logs/log types?</P> Fri, 06 May 2016 14:48:05 GMT https://community.splunk.com/t5/Getting-Data-In/Forwarding-Exchange-admin-logs/m-p/240293#M46688 furkan_caliskan 2016-05-06T14:48:05Z https://community.splunk.com/t5/Getting-Data-In/Forwarding-Exchange-admin-logs/m-p/240294#M46689 <P>There is a Splunk app for exchange. Did you see it?</P> <P>Product brief:<BR /> <A href="http://www.splunk.com/en_us/solutions/solution-areas/it-operations-management/microsoft-infrastructure-monitoring/splunk-app-for-microsoft-exchange.html">http://www.splunk.com/en_us/solutions/solution-areas/it-operations-management/microsoft-infrastructure-monitoring/splunk-app-for-microsoft-exchange.html</A></P> <P>Download/overview:<BR /> <A href="https://splunkbase.splunk.com/app/1660/">https://splunkbase.splunk.com/app/1660/</A></P> <P>It comes with documentation:<BR /> <A href="https://splunkbase.splunk.com/app/1660/#/documentation">https://splunkbase.splunk.com/app/1660/#/documentation</A></P> Fri, 06 May 2016 23:23:32 GMT https://community.splunk.com/t5/Getting-Data-In/Forwarding-Exchange-admin-logs/m-p/240294#M46689 jkat54 2016-05-06T23:23:32Z