Is support for MS Exchange 2016 in the works? If so, when can we anticipate a release?
Following Doc links have information about what inputs need to be enabled for 2016.
Inputs :
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-ClientAccessinputs
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-Mailboxinputs
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-Exchange-IISinputs
You can refer following links to know How to configure those inputs
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-ClientAccess
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-Mailbox
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-Exchange-IIS
The latest exchange release (3.3) does support exchange 2016.
Now MS Exchange add-ons can be downloaded separately from splunkbase. To support exchange 2016, enable the common inputs and 2013 specific inputs in all TAs. Ref link http://docs.splunk.com/Documentation/MSExchange/3.3.0/Add-Ons/About.
So does this mean you go through the 2013/2016 stanzas and only changed disabled to false? Or if you're using EX16, should you change anywhere that mentions 2013 to 2016? e.g.:
[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2016.ps1]
source=Powershell
sourcetype=MSExchange:2016:InboxRules
interval=86400
index=msexchange
disabled=false
not
[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2013.ps1]
source=Powershell
sourcetype=MSExchange:2013:InboxRules
interval=86400
index=msexchange
disabled=false
?
Also there is no section for 2013/2016 in TA-Exchange-HubTransport.
Thank you. This comment should definitely be an answer, and should also be in the documentation. It's been two years.
Thanks. Perhaps the docs should be updated to reflect this? As of today the docs only say the following: "It has support for Exchange Server 2007, 2010, and 2013"
Agree with your question. it should be. We will look into this doc change.
Why hasn't this question been answered?