More Exchange related code

gregclermont · Mar 30, 2021 · bf502e8 · bf502e8
1 parent 280017e
commit bf502e8
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/Vagrant/resources/splunk_forwarder/exchange_inputs.conf b/Vagrant/resources/splunk_forwarder/exchange_inputs.conf
@@ -0,0 +1,23 @@
+[monitor://C:\Program Files\Microsoft\Exchange Server\V15\Logging\Ews]
+whitelist=\.log$|\.LOG$
+sourcetype=MSWindows:2016EWS:IIS
+queue=parsingQueue
+index=msexchange
+disabled=false
+initCrcLength=8192
+
+[monitor://C:\inetpub\logs\LogFiles\W3SVC1]
+whitelist=\.log$|\.LOG$
+sourcetype=MSWindows:IIS
+queue=parsingQueue
+index=msexchange
+disabled=false
+initCrcLength=8192
+
+[monitor://C:\inetpub\logs\LogFiles\W3SVC2]
+whitelist=\.log$|\.LOG$
+sourcetype=MSWindows:IIS
+queue=parsingQueue
+index=msexchange
+disabled=false
+initCrcLength=8192