https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41739#M7771 <P>I got the IIS Logs and the Message Tracking Logs as well. Does this help? Can I copy these logs to any location of /etc/apps/Splunk_For_Exchange/ to understand or get information from this log. </P> <P>Can I not proceed further without Power shell script info?<BR /> How does this info look or what extension or type does it have?</P> Mon, 28 Sep 2020 12:19:00 GMT hiteshkanchan 2020-09-28T12:19:00Z https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41736#M7768 <P>I have CAS, Hub and MBX logs (Application, System and Event Logs) which I got from a Microsoft Exchange server. Can I directly load it into the Exchange APP of splunk for understannding this data/log?.</P> <P>If yes, can someone tell me which path can I copy this log into so that I can check the information or get the details from this logs. </P> Wed, 22 Aug 2012 13:30:21 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41736#M7768 hiteshkanchan 2012-08-22T13:30:21Z https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41737#M7769 <P>I think it might not be as useful and lots of data are from powershell scripts...</P> <P>All is based on sourcetype you can have a look in the app's TAs inputs.conf:</P> <PRE><CODE>Splunk_for_Exchange/appserver/addons/TA-*/default/inputs.conf </CODE></PRE> Wed, 22 Aug 2012 14:10:18 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41737#M7769 MarioM 2012-08-22T14:10:18Z https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41738#M7770 <P>The Windows Event Logs contain hardly any of the information required to run the Splunk App for Microsoft Exchange. In addition to Exchange specific logs, such as the IIS logs and Message Tracking logs, the Splunk App for Microsoft Exchange requires access to in-memory data structures that it exposes via Powershell scripts. So, the answer is - unfortunately - no, you cannot just import the Windows Event Logs from an Exchange server and expect the app to work.</P> Wed, 22 Aug 2012 15:14:49 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41738#M7770 ahall_splunk 2012-08-22T15:14:49Z https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41739#M7771 <P>I got the IIS Logs and the Message Tracking Logs as well. Does this help? Can I copy these logs to any location of /etc/apps/Splunk_For_Exchange/ to understand or get information from this log. </P> <P>Can I not proceed further without Power shell script info?<BR /> How does this info look or what extension or type does it have?</P> Mon, 28 Sep 2020 12:19:00 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41739#M7771 hiteshkanchan 2020-09-28T12:19:00Z https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41740#M7772 <P>My requirement is, I actually want to see if I can make any sense out of the data logs that I got from an Microsoft Exchange. So was checking if I could put this logs(Event Logs + IIS logs + Message Tracking logs) into any log path of Splunk_for_Exchange/... to understand the data. Not sure if I can get data from powershell scripts. Any idea abt the location or type of this data.</P> Mon, 28 Sep 2020 12:19:03 GMT https://community.splunk.com/t5/Getting-Data-In/Exchange-App-for-Splunk/m-p/41740#M7772 hiteshkanchan 2020-09-28T12:19:03Z