Update 11/21/2025: The deprecation of the legacy Message Trace support on Reporting Webservice will be slightly delayed by two weeks from the original deprecation date of February 28th, 2026 to March...
Updated Nov 21, 2025
Version 6.0
Blog Post
3 MIN READ
Announcing General Availability (GA) of the New Message Trace in Exchange Online
How will this affect the logging to Splunk? Currently we use the https://splunkbase.splunk.com/app/4055 to onboard the following logs with separate inputs:
- Input Type = Management Activity; Content Type = Audit.Exchange, and
- Input Type = Message Trace
Would this change how the logs are ingested to Splunk?