- play_arrow WinCollect 10 Overview
- play_arrow Installing WinCollect 10
- play_arrow Installing WinCollect 10
- Hardware and software requirements for the WinCollect 10 host
- Upgrading WinCollect 10 agents
- Installing WinCollect 10 using the GUI Quick installation
- Installing WinCollect 10 using the command line
- Installing WinCollect 10 using the Advanced installer
- WinCollect 10 Command line installation advanced examples
- WinCollect 10 installation script examples
- play_arrow Uninstalling WinCollect 10
- play_arrow WinCollect 10 Stand-alone Console
- play_arrow WinCollect 10 stand-alone console
- play_arrow WinCollect 10 stand-alone configuration
- play_arrow Agent settings
- Service status
- Log Viewer
- Top Sources
- Applying pending changes
- play_arrow Create a source in the Source wizard
- play_arrow Configuration Scripts
- play_arrow Configuration scripts
- Configuring WinCollect 10 to collect Microsoft security events
- play_arrow Agent configuration update script use cases
- Adding NSA filtering to an existing source
- Add Sysmon to your existing Windows event sources
- Changing the heartbeat interval
- Modifying the event data storage configuration
- Sending Syslog data to JSA over TCP
- Change the console port number
- Configuring a remote source with an update script
- Add Active Directory lookup update script
- Update script to add a secondary destination
- Update script file warn and error messages
- play_arrow Advanced Settings
- play_arrow Advanced settings
- Agent advanced settings
- play_arrow Source advanced settings
- Microsoft Windows events advanced settings
- EVTX Forwarder advanced settings
- Common file-based plugin advanced settings
- File Forwarder advanced settings
- Microsoft DHCP Server advanced settings
- Microsoft DNS Debug advanced settings
- Microsoft Exchange Server advanced settings
- Microsoft Forefront TMG advanced settings
- Microsoft IIS advanced settings
- Microsoft NPS advanced settings
- Microsoft SQL Server advanced settings
- System advanced settings
- play_arrow The WinCollect 10 Statistics File
- play_arrow WinCollect Terminology
Microsoft Exchange Server source
You can configure the Microsoft Exchange Server source to monitor Message Tracking, SMTP, and Outlook Web Access (OWA) logs.
| Message Tracking logs | The message tracking log is a detailed record of all activity as mail flows through the pipeline on Mailbox servers and Edge Transport servers. You can use message tracking for message forensics, mail flow analysis, reporting, and troubleshooting. |
| SMTP logs | Transport logs provide information about what's happening in the transport pipeline. |
| OWA logs | Outlook Web Access logs are typical Internet Information Services (Exchange Server) logs. |
| Parameter | Description |
|---|---|
| Type | Microsoft Exchange Server |
| Root directory | Default Value = C:\Program Files\Microsoft\Exchange
Server\V15\TransportRoles\Logs Note: You no longer need to enter the UNC path for remote sources. |
| Message Tracking directory | Default Value = MessageTracking This is the name of the folder under the root directory that contains the Message Tracking log files. |
| SMTP directory | Default Value = Hub\ProtocolLog This is the name of the folder under the root directory that contains the SMTP log files. |
| OWA directory | Default Value = C:\inetpub\logs\LogFiles This is the name of the folder under the root directory that contains the OWA log files. |
Supported versions of Microsoft Exchange Server
The WinCollect Microsoft Exchange Server plug-in is not supported on versions of Microsoft Exchange Server that are designated end-of-life by Microsoft. After the software is beyond the Extended Support End Date, the product might still function as expected. However, Juniper does not make code or vulnerability fixes to resolve WinCollect issues for older software versions.
