Getting Data In

MS Exchange Application

catch_mili
Explorer

Hi All,

I have been monitoring MS Exchange server using SCOM.
But now looking at Splunk for Exchange, monitoring my Exchange server.
So, I need administrative guide of Splunk for MS Exchange & features of it.
And if I get comparison between SCOM & Splunk for Exchange.Also need some explanation from following points :

1.Business benefits of using Splunk for Exchange.
2.If possible, cite business examples also. So that it becomes easy to understand.
3.Additional list of charts/reports which would make business sense.

Thanks in Advanced.

Regards,
catch_mili

Tags (1)
0 Karma

Drainy
Champion

On the first page of the docs is the Splunk for Exchange docs;
http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/AboutSplunkforMicrosoftExchange

The summary page of the app also has some blurb;
http://splunk-base.splunk.com/apps/28976/splunk-app-for-microsoft-exchange

Otherwise, a great selling point would be that Microsoft use it to monitor their own Exchange environment. The docs should help with everything else

EDIT: Oh, and its free, so if you're already using Splunk it wouldn't hurt to run your own small scale test deployment

0 Karma

emikulic
Explorer

Driany,

Are you guys talking about the "Splunk App for Microsoft Exchange"? https://splunkbase.splunk.com/app/1660/

On the comment about it being free: It appears as a paid app and I was wondering about that: "This app requires a paid license to use. The trial license lasts for 60 days." Or maybe i'm just confused and it implies the splunk server itself is a licensed product?

I am also digging into the docs to see how if works on a distributed exchange install :
http://docs.splunk.com/Documentation/MSExchange/3.1.3/DeployMSX/Releasenotes
http://docs.splunk.com/Documentation/MSExchange/3.1.3/DeployMSX/AboutSplunkforMicrosoftExchange
http://www.splunk.com/content/dam/splunk2/pdfs/solution-guides/splunk-for-windows.pdf

0 Karma

catch_mili
Explorer

Hey Drainy,
Thanks for quick reply.

Regards.
catch_mili

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...