All Apps and Add-ons

Splunk app for exchange messages

pmovrich
Explorer

How does the exchange app determine, inbound vs outbound messages along with internal messages? These three pages within in the exchange app are not populating. I do see other e-mail messaging stats like message activity by username, etc.

Thanks

0 Karma
1 Solution

ahall_splunk
Splunk Employee
Splunk Employee

The determination depends on the message tracking logs. If the message comes in via SMTP, its an inbound message. If it goes out via SMTP, it's an outbound message. If its not inbound or outbound, it's internal.

View solution in original post

0 Karma

ahall_splunk
Splunk Employee
Splunk Employee

The determination depends on the message tracking logs. If the message comes in via SMTP, its an inbound message. If it goes out via SMTP, it's an outbound message. If its not inbound or outbound, it's internal.

0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...