Following Doc links have information about what inputs need to be enabled for 2016. Inputs : http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-ClientAccessinputs http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-Mailboxinputs http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/TA-Exchange-IISinputs You can refer following links to know How to configure those inputs http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-ClientAccess http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-Mailbox http://docs.splunk.com/Documentation/MSExchange/3.5.0/Add-Ons/ConfigureTA-Exchange-IIS ... View more

I am looking for a way to run PS script directly from alert actions. I couldn't find a way to do it except running a bat script to call my powershell script. If anybody find a way to resolve this, please share 🙂 ... View more