Both Splunk Apps for Microsoft Exchange and Window...

BP9906 · ‎02-25-2016

I have both apps installed and there are many saved searches doing the same thing. Do I need to just use one or the other or are there some features missing from Exchange that are in Infrastructure?

Searches from these 2 apps are consuming most of the resources on my 3 search head cluster members. 😞

ntankersley_spl · ‎09-14-2016

You should only need Exchange, Windows Infrastrcuture comes bundles as part of the Exchange App.

Both Splunk Apps for Microsoft Exchange and Windows Infrastructure have overlapping saved searches. Should I use on or the other?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

Join the Conversation