Can the Splunk App for Microsoft Exchange report top senders by subject as well as message, count, and volumes?

[DanClarke]

Hi,

I am looking into a reporting solution. Currently using MS outlook to manage new issues being raised and to produce a weekly report mainly based on the subject matter of each email. Having reviewed the Splunk Docs for MS exchange app, I'm hoping to clarify that its reporting capabilities include being able to report on each of the following -

1. Subject Matter (key field that I cannot confirm from splunk docs)

2. Senders/Recipients (whether by IP, Domain or User)
3. Message Counts
4. Volumes

Basically I cannot confirm from the Splunk documentation that it will report on message subject as stated in the subject header?

Any confirmation from other users of this app would be much appreciated.

[Azeemering · Accepted solution]

Basically yes;

You can track Messages bases in subject, time, sender, recipients, size etc....
http://docs.splunk.com/Documentation/MSExchange/3.4.3/Reference/MessageActivitybyUsername

Volume:
http://docs.splunk.com/Documentation/MSExchange/3.4.3/Reference/MessageVolume

Once al the data is in you can easily build a report on what you are stil missing if you really need to.