Re: Both Splunk Apps for Microsoft Exchange and Wi...

BP9906 · ‎02-25-2016

I have both apps installed and there are many saved searches doing the same thing. Do I need to just use one or the other or are there some features missing from Exchange that are in Infrastructure?

Searches from these 2 apps are consuming most of the resources on my 3 search head cluster members. 😞

ntankersley_spl · ‎09-14-2016

You should only need Exchange, Windows Infrastrcuture comes bundles as part of the Exchange App.

Both Splunk Apps for Microsoft Exchange and Windows Infrastructure have overlapping saved searches. Should I use on or the other?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation