Splunk Search

How to search for unused Exchange distribution lists?

sharmabr
New Member

Is there a search that can identify stale Exchange 2010 distribution lists that haven't been used recently (e.g., >90/180/270 days), perhaps based on message tracking logs over time? Thanks.

0 Karma

sundareshr
Legend
0 Karma

sharmabr
New Member

Yes, but it doesn't have this query natively in the app. I'm hoping someone has a creative way of piecing this together based on available Exchange log data.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...