Can Splunk monitor an Exchange mailbox for a specific email subject line?
Not directly.
You can ingest the Exchange Message Tracking Logs, which are not turned on by default, but when they are, they are standard CSV files and one of the fields is the email subject.
