Support for Exchange 2016

[mikaelbje]

Is support for MS Exchange 2016 in the works? If so, when can we anticipate a release?

[bparekh_splunk]

Following Doc links have information about what inputs need to be enabled for 2016.
Inputs :
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-ClientAccessinputs
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-Mailboxinputs
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-Exchange-IISinputs

You can refer following links to know How to configure those inputs

http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-ClientAccess
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-Mailbox
http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-Exchange-IIS

[hardikJsheth · Accepted solution]

The latest exchange release (3.3) does support exchange 2016.

[bparekh_splunk]

Now MS Exchange add-ons can be downloaded separately from splunkbase. To support exchange 2016, enable the common inputs and 2013 specific inputs in all TAs. Ref link http://docs.splunk.com/Documentation/MSExchange/3.3.0/Add-Ons/About.

[nick405060]

So does this mean you go through the 2013/2016 stanzas and only changed disabled to false? Or if you're using EX16, should you change anywhere that mentions 2013 to 2016? e.g.:

[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2016.ps1]
source=Powershell
sourcetype=MSExchange:2016:InboxRules
interval=86400
index=msexchange
disabled=false

not

[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2013.ps1]
source=Powershell
sourcetype=MSExchange:2013:InboxRules
interval=86400
index=msexchange
disabled=false

?

[nick405060]

Also there is no section for 2013/2016 in TA-Exchange-HubTransport.

[nick405060]

Thank you. This comment should definitely be an answer, and should also be in the documentation. It's been two years.

[mikaelbje]

Thanks. Perhaps the docs should be updated to reflect this? As of today the docs only say the following: "It has support for Exchange Server 2007, 2010, and 2013"

[bparekh_splunk]

Agree with your question. it should be. We will look into this doc change.

[jsdao]

Why hasn't this question been answered?