Splunk Search

stanza to run powershell script in exchange 2016.

saramamurthy_sp
Splunk Employee
Splunk Employee

What should be my inputs.conf stanza to run the PowerShell script in the Exchange server 2016 with windows server 2016

[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2013.ps1]
source=Powershell
sourcetype=MSExchange:2016:InboxRules
interval=3600
index=msexchange
disabled=false

or

[script://.\bin\exchangepowershell.cmd v15 get-inboxrules_2010_2016.ps1]
source=Powershell
sourcetype=MSExchange:2016:InboxRules
interval=3600
index=msexchange
disabled=false

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...