Splunk Search

what is the FAC for the edge role (Exchange app)

juank
Engager

I think I got it right... Now is sending logs as it is supposed to be. The only question I have now is about the FACs. For Exchnge 2010 there is one for hub transport role and one for the mailbox role... What about the edge role? Am I supposed to use one of those FACs or not ?

Thanks

0 Karma
1 Solution

ahall_splunk
Splunk Employee
Splunk Employee

In terms of inputs, the EDGE and HUB TRANSPORT roles are identical. So install the HUB TRANSPORT FAC on your EDGE TRANSPORT.

View solution in original post

0 Karma

ahall_splunk
Splunk Employee
Splunk Employee

In terms of inputs, the EDGE and HUB TRANSPORT roles are identical. So install the HUB TRANSPORT FAC on your EDGE TRANSPORT.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...