https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/564268#M8535 <P>Hi All,</P><P>I'm trying to on-board logs which are related to <U><STRONG>litigation hold</STRONG></U> from our exchange servers.</P><P>So far we've added the add-on: "TA-Exchange-Mailbox".</P><P>&nbsp;</P><P>Which other add-on should we configure? What monitor stanza should be enabled?</P><P>&nbsp;</P><P>Thanks in advance!&nbsp;</P> Mon, 23 Aug 2021 07:33:58 GMT knadav 2021-08-23T07:33:58Z https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/564268#M8535 <P>Hi All,</P><P>I'm trying to on-board logs which are related to <U><STRONG>litigation hold</STRONG></U> from our exchange servers.</P><P>So far we've added the add-on: "TA-Exchange-Mailbox".</P><P>&nbsp;</P><P>Which other add-on should we configure? What monitor stanza should be enabled?</P><P>&nbsp;</P><P>Thanks in advance!&nbsp;</P> Mon, 23 Aug 2021 07:33:58 GMT https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/564268#M8535 knadav 2021-08-23T07:33:58Z https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/566821#M8562 <P>Hi Guys,</P><P>Does someone have any information on this?</P><P>Thanks!&nbsp;</P> Mon, 13 Sep 2021 10:08:59 GMT https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/566821#M8562 knadav 2021-09-13T10:08:59Z https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/665706#M9852 <P>look for the powershell logs "-LitigationHoldEnabled"</P> Fri, 20 Oct 2023 17:02:43 GMT https://community.splunk.com/t5/Monitoring-Splunk/Exchange-Litigation-Hold-logs/m-p/665706#M9852 jrprez1804 2023-10-20T17:02:43Z