Monitoring Splunk

Exchange Litigation Hold logs

knadav
Explorer

Hi All,

I'm trying to on-board logs which are related to litigation hold from our exchange servers.

So far we've added the add-on: "TA-Exchange-Mailbox".

 

Which other add-on should we configure? What monitor stanza should be enabled?

 

Thanks in advance! 

0 Karma

knadav
Explorer

Hi Guys,

Does someone have any information on this?

Thanks! 

0 Karma

jrprez1804
Path Finder

look for the powershell logs "-LitigationHoldEnabled"

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...