Getting Data In

Is there an app for Splunk that onboard data from mailboxes?

Loves-to-Learn Lots


I know there is an Exchange app for Splunk, and it covers a few different use cases, such as performance, usage, health, etc ... But ... is there an app which can actually onboard data from mailboxes, i.e., received/sent emails including metadata, attachments, body, headers, etc...?

Thank you.

0 Karma


TA-Exchange-Mailbox - AddOn-Exchange-Mailbox:(C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking]) This is the data input and field extractions for an Exchange Mailbox Role. It is used in conjunction with Splunk for Exchange.

There is add-on “Microsoft Office 365 Reporting Add-on for Splunk” available in Splunk base that collects Message Trace data from Microsoft Office 365.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...