All Apps and Add-ons

Can the Splunk App for Microsoft Exchange report top senders by subject as well as message, count, and volumes?

DanClarke
New Member

Hi,

I am looking into a reporting solution. Currently using MS outlook to manage new issues being raised and to produce a weekly report mainly based on the subject matter of each email. Having reviewed the Splunk Docs for MS exchange app, I'm hoping to clarify that its reporting capabilities include being able to report on each of the following -

1. Subject Matter (key field that I cannot confirm from splunk docs)

2. Senders/Recipients (whether by IP, Domain or User)
3. Message Counts
4. Volumes

Basically I cannot confirm from the Splunk documentation that it will report on message subject as stated in the subject header?

Any confirmation from other users of this app would be much appreciated.

0 Karma
1 Solution

Azeemering
Builder

Basically yes;

You can track Messages bases in subject, time, sender, recipients, size etc....
http://docs.splunk.com/Documentation/MSExchange/3.4.3/Reference/MessageActivitybyUsername

Volume:
http://docs.splunk.com/Documentation/MSExchange/3.4.3/Reference/MessageVolume

Once al the data is in you can easily build a report on what you are stil missing if you really need to.

View solution in original post

0 Karma

Azeemering
Builder

Basically yes;

You can track Messages bases in subject, time, sender, recipients, size etc....
http://docs.splunk.com/Documentation/MSExchange/3.4.3/Reference/MessageActivitybyUsername

Volume:
http://docs.splunk.com/Documentation/MSExchange/3.4.3/Reference/MessageVolume

Once al the data is in you can easily build a report on what you are stil missing if you really need to.

0 Karma
Get Updates on the Splunk Community!

Thanks for the Memories! Splunk University, .conf24, and Community Connections

Thank you to everyone in the Splunk Community who joined us for .conf24 – starting with Splunk University and ...

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...