Splunk Search

How to search for unused Exchange distribution lists?

New Member

Is there a search that can identify stale Exchange 2010 distribution lists that haven't been used recently (e.g., >90/180/270 days), perhaps based on message tracking logs over time? Thanks.

0 Karma

Legend
0 Karma

New Member

Yes, but it doesn't have this query natively in the app. I'm hoping someone has a creative way of piecing this together based on available Exchange log data.

0 Karma