Splunk App for Microsoft Exchange

Service-centric Visibility and Analytics for your MS Exchange Infrastructure and Beyond

Email services are critical to the daily operations of your organization. Any service disruption can be catastrophic--and can damage your company's reputation, impair customer communications and lead to lost orders or worse.

Gain real-time visibility into your email service health and performance across the entire messaging infrastructure, including diverse message delivery components and the supporting infrastructure. Gain comprehensive operational analytics for resource planning, capacity forecasting, security intelligence and user behavior. The Splunk App for Microsoft Exchange helps you to:

  • Easily identify and correlate performance, health and security events using prebuilt dashboards and reports of the entire email service
  • Keep track of user behaviors, identify potential issues or possible bottlenecks--and take proactive measures to prevent them
  • Correlate messaging infrastructure data with disparate data from across the IT infrastructure (Windows, AD, Linux, network devices and more)
  • Scale to handle the largest of email deployments; Splunk software has proven itself in some of the largest Exchange-based email services

The Splunk App for Microsoft Exchange provides up-to-the-minute information on the health of your Exchange environment with proactive end-to-end monitoring across diverse message delivery components, including operating systems, applications, devices and services. It allows you to combine this information with data and insights across the IT infrastructure. The result is a view of entire service infrastructure, available in a single location, helping you to resolve issues and avoid service degradation and downtime.

The Splunk App for Microsoft Exchange 3.0 also includes packaged content that is customizable for various operational use cases such as capacity monitoring, resource forecasting, user behavior tracking and security event identification.

Gain full visibility into how your messaging system is being used.

Gain full visibility into how your messaging system is being used.

The Splunk App for Microsoft Exchange 3.0 harnesses the power of the Splunk Enterprise Platform to deliver a fundamentally different approach for IT. It gives you insights from across your messaging infrastructure, including critical dependencies, such as the operating system, supporting applications and non-Exchange devices and/or services. The result is a single view of the entire service infrastructure, available from a single location. This comprehensive visibility helps you to discover and resolve problems quickly and avoid service degradation and downtime.

The Splunk approach provides correlation of performance, security, and user event information, which directly or indirectly impact the entire service. For example, you can dive into host OS information or non-Exchange related process or services—including heterogeneous components or applications as needed. Doing so not only offers rapid root cause analysis and reduces support costs, but also provides operational intelligence by letting you compare sets of data previously siloed from one another.

The dashboard builder provides custom reports on services and components.

The dashboard builder provides custom reports on services and components.

Packaged Correlation - Easily identify the inter-relationships between performance, health, and security events using pre-built dashboards and reports of the entire email service.

Dashboard Builder - Quickly and easily create, save and share custom reports of related services and components by simply querying on contextual information, such as "log outs," "performance" and "health."

Operations Dashboards - Gather up-to-the-minute information on the health of your Exchange environment and its supporting infrastructure such as Windows Server and Active Directory, including service availability, organizational reputation, performance data and administrative reports.

Messaging Tracking - Get a complete breakdown of your end-to-end message flow. Dashboard views display information and provide administrators with important segmentation and load information about message flow, allowing message tracking from the desktop to the gateway.

Client Behavior Monitoring - Gain in-depth visibility into your messaging service and how it's being utilized. This includes the method of access (device or protocol), operating system, browser, location and mailbox usage statistics. By identifying user trends, administrators can identify potential issues or possible bottlenecks and take proactive measures to prevent them.

Capacity Planning - Understand the messaging volume and the number of users your system is handling over time so you can plan for future growth and scale.

Enterprise Scale - Splunk software can scale to largest email deployments—from organizations with a handful of users to full enterprises with hundreds of thousands of employees.

The operations dashboards deliver key information on the health of your Exchange environment.

The operations dashboards deliver key information on the health of your Exchange environment.

Supported Exchange Server Versions

  • Exchange Server 2007 (requires Windows Server 2003 SP1 or Server 2003 R2 RTM or later)
  • Exchange Server 2010 (requires Windows Server 2008 SP2 or Server 2008 R2 SP1 or later)
  • Exchange Server 2013 (requires Windows Server 2012 RTM or later)

Splunk Requirements

  • All Splunk indexers and any Splunk search heads require Splunk version 6.0 or later.
  • All Splunk universal forwarders require version 6.0 or later
  • The Splunk Add-on for Windows
  • The Splunk Add-on for Active Directory

OS Requirements

Splunk Enterprise and the Splunk App for Microsoft Exchange 3.0 run on the following versions of Windows, including:

  • Windows Server 2003/2003 R2, Server 2008/2008 R2, or Server 2012/2012 R2
  • Windows XP, Vista, 7, and 8

The Splunk App for Microsoft Exchange can also be installed on a non-Windows Splunk instance (such as Linux) to display Windows data coming from external Windows sources.

Microsoft and Windows are registered trademarks of Microsoft Corporation in the United States and other countries.