×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
nopera
Explorer
Member since: ‎07-21-2025
‎07-23-2025
Community Statistics
Posts 5
Solutions 0
Karma Given 4
Karma Received 1
Member Since ‎07-21-2025
Activity Feed
Topics I've Started
View All

Re: Exchange Message Tracking

by in Getting Data In
‎07-22-2025 12:14 PM
1 Karma
‎07-22-2025 12:14 PM
1 Karma
That worked. Thank you so much. For other people that need help about this situation, a summary: My environment: a standalone Splunk Enterprise instance  on-prem exchange server 2019 in mailbox role exhange server universal forwarder installed Actions to get exchange logs: on Splunk Enterprise instance :  deployed the Splunk add-on for Microsoft Exchange indexes (to easily manage indexes) Deploy the TA-Exchange-Mailbox add-on in the file at /opt/splunk/etc/apps/TA-Exchange-Mailbox Restart Splunk service on Exchange Server Deploy the TA-Exchange-Mailbox add-on at C:\Program Files\SplunkUniversalForwarder\etc\apps Restart the forwarder ... View more

Re: Exchange Message Tracking

by in Getting Data In
‎07-22-2025 02:06 AM
‎07-22-2025 02:06 AM
  @kiran_panchavat    I dont use heavy forwarder, i installed universal forwarded to the exchange server, i placed the add-on "TA-Exchange-Mailbox" (server is in mailbox role) to the path "C:\Program Files\SplunkUniversalForwarder\etc\apps". Now i am getting the logs but message tracking logs arent parsed correctly.  What should I do now? Example logs below from test env.             ... View more

Re: Exchange Message Tracking

by in Getting Data In
‎07-21-2025 11:19 AM
‎07-21-2025 11:19 AM
Hi, thank you for replies. To clarify, which path should I place the add-on file?It comes as .tgz, to where should i extract it? @livehybrid  @kiran_panchavat  ... View more

Re: Exchange Message Tracking

by in Getting Data In
‎07-21-2025 11:11 AM
‎07-21-2025 11:11 AM
Hi, thank you for reply. To clarify, which path should I place the add-on file?It comes as .tgz, to where should i extract it?     ... View more

Exchange Message Tracking

by in Getting Data In
‎07-21-2025 08:11 AM
‎07-21-2025 08:11 AM
Hi, Could you help me retrieve message-tracking logs from our on-premises Exchange server? I added the following lines to inputs.conf, but the data still isn’t being parsed. I guess smt is missing or incorrect. I’m also unsure how to set up the Exchange add-on and haven’t found clear documentation. Any guidance would be greatly appreciated   [monitor://C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking\] disabled = false sourcetype = exchange_messagetracking index = exchange host_segment = 4 [monitor://C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking\*.log] disabled = false sourcetype = exchange_messagetracking index = exchange     ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-23-2025 01:30 AM
Karma from
View All
Karma given to