Splunk for exchange

1. With Splunk App for Microsoft Exchange you can:
• Identify infrastructure problems, such as non-running
services and load issues
• Monitor the performance of all servers throughout your
messaging environment
• Track inbound and outbound messages throughout your
messaging environment
• Monitor client usage, including mobility usage via
ActiveSync
• Monitor security events such as anomalous logons and
litigation holds
• Track administrative changes to the environment
• Analyze long-term mail operations trends
• Plan for capacity expansion
• Monitor your organization’s outbound email sender
reputation
Splunk App for Microsoft Exchange Features
The Splunk App for Microsoft Exchange provides several
specialized features to monitor Exchange data, including:
Operations Dashboards: Provides up-to-the-minute information
on the health of your Exchange environment, including service
availability, organizational reputation, performance data and
administrative reports.
Dashboard Views Include:
• Overview – View server availability, service availability,
message throughput and DNSBL reputation
Messaging environments are critical to business success and
customer satisfaction. A disruption in email services can mean losing
orders, missing out on important customer communications and
damage to your organization’s reputation. Add to this the increasing
volume of cyber-security attacks along with the need to support
mobile devices, and your IT organization’s ability to provide support
can quickly reach a breaking point. IT departments need to
deliver email services that are constantly available, so having deep
operational insight into the inner workings of their messaging
infrastructure is critical.
Splunk App for Microsoft Exchange
The Splunk App for Microsoft® Exchange answers the call of IT
departments globally. In today’s complex world of interdependent
technologies, customers need a monitoring and reporting solution
that can look beyond the immediate needs of a single product
and deal with the email service. Traditional email management
tools only notify you of an “up or down” status and are incapable
of viewing the entire messaging platform beyond the Exchange
Server boundary. By contrast, the Splunk App for Microsoft
Exchange delivers a data-rich and easy-to-use platform to make
your entire messaging infrastructure visible and simple to
manage. The Splunk App for Microsoft Exchange collects metrics
and logs from Microsoft Exchange Server and the associated
infrastructure (Windows Server security event logs, Exchange audit
and application events and internal .NET data structures). Now
Exchange administrators can view real-time trends, dashboards and
reports to reduce mean time to repair problems. IT organizations
can view service availability, usage patterns and traffic flow, while
also drilling into details on performance and security.
Real-time Management of Microsoft Exchange-based Email Infrastructures
Splunk® App for Microsoft® Exchange
F A C T S H E E T
• Monitor key Exchange Server performance data
• Identify issues, reduce the mean time to repair and
maintain maximum uptime
• Deliver integrated, centralized view of entire
Microsoft Exchange infrastructure from one place
• Audit usage patterns and metrics of the entire
messaging infrastructure
H I G H L I G H T S

2. www.splunk.com
250 Brannan St, San Francisco, CA, 94107 info@splunk.com | sales@splunk.com 866-438-7758 | 415-848-8400 www.splunkbase.com
Copyright © 2012 Splunk Inc. All rights reserved. Splunk Enterprise is protected by U.S. and international copyright and intellectual property laws. Splunk is a registered trademark or trademark
of Splunk Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies. Item # FS-Splunk-AppMSExch-102
F A C T S H E E T
www.splunk.com
250 Brannan St, San Francisco, CA, 94107 info@splunk.com | sales@splunk.com 866-438-7758 | 415-848-8400 www.splunkbase.com
• Performance – View key Exchange performance counters
and metrics
• Systems – View detailed information on all the components
of your Exchange Server email system
• Administrative Reports – View key operations reports
Tracking: Provides a breakdown of the flow of messages through
the email infrastructure. Dashboard views display information
and provide administrators with important segmentation and
load information about mail flow, allowing for messages to be
tracked to the edge.
Dashboard Views Include:
• Inbound Message Tracking – View messages entering the
email system
• Outbound Message Tracking – View messages leaving the
email system
• Internal Message Tracking – View messages flowing within
the email system
• Track a Message – Track messages with the email system
• Message Activity for Username – Track email activity by user
• Message Activity for an IP Address – Track what an IP
address is sending or receiving
• Message Activity for a Domain – Track what messages
have been sent or received from a domain
Client Behavior: Provides in-depth visibility into how the
email service is being utilized. This includes the method
of access (device or protocol), operating system, browser,
location and mailbox usage statistics. By identifying user
trends, administrators can identify potential issues or possible
bottlenecks and take proactive measures to prevent them.
Dashboard Views Include:
• Mailbox Store Overview – Top users in a mailbox store
• Microsoft Outlook Overview – Outlook usage data over
the LAN
• Outlook Web Access Overview – OWA usage data over a
given time, operating system and browser
• Microsoft ActiveSync Overview – ActiveSync connections
by user, device and connection time
• Outlook Anywhere Overview – Outlook Anywhere usage
data by user or IP address
• Exchange Web Services Overview – Exchange Web
Service usage data by user, operating system and client
• POP3 and IMAP4 Overview – Usage of POP3 or IMAP4
protocols by user and time
• Client Activity for a Username – How a user is connecting,
what browser and device they are using
• External Logins Map – Google Map™ showing external
user login location
Capacity Planning: Displays information about the volume of
email and number of users your system is handling over time to
help you to plan for growth.
Dashboard views include:
• Message Volume - Displays number of messages the
Exchange Server processes
• User Population – Details user count and average mailbox
size over time
• Environment Report – Overview of the entire Microsoft
Exchange Server environment
Product Requirements
Supported Exchange Server Versions
Splunk App for Microsoft Exchange supports Microsoft Exchange
Server 2007, 2010 and 2013 running on Windows Server 2003 or
later.
Splunk Requirements
Splunk App for Microsoft Exchange requires Splunk® Enterprise™
on Windows v4.3.4 for deployment to the Exchange Servers.
Splunk App for Microsoft Exchange UI requires Splunk Enterprise
v4.3 or later, Sideview Utils v1.3.5 or later and Google Maps™.
Sideview Utils ™ and Google Maps are available as a free
downloads on Splunk Base.
Try Out the App, it’s Free!
Go to www.splunk.com/microsoft to learn more.
Free Download
Download Splunk You’ll get a Splunk Enterprise license for 60
days and you can index up to 500 megabytes of data per day.
You can convert to a perpetual Free license or purchase an
Enterprise license by contacting sales@splunk.com.