Splunk Search

what is the FAC for the edge role (Exchange app)

juank
Engager

I think I got it right... Now is sending logs as it is supposed to be. The only question I have now is about the FACs. For Exchnge 2010 there is one for hub transport role and one for the mailbox role... What about the edge role? Am I supposed to use one of those FACs or not ?

Thanks

0 Karma
1 Solution

ahall_splunk
Splunk Employee
Splunk Employee

In terms of inputs, the EDGE and HUB TRANSPORT roles are identical. So install the HUB TRANSPORT FAC on your EDGE TRANSPORT.

View solution in original post

0 Karma

ahall_splunk
Splunk Employee
Splunk Employee

In terms of inputs, the EDGE and HUB TRANSPORT roles are identical. So install the HUB TRANSPORT FAC on your EDGE TRANSPORT.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...