Update 1/22/2026: The new Message Trace support using Graph API is now in Public Preview. The deprecation of the legacy Message Trace support using Reporting Webservice is scheduled for April 8, 2026...
Updated Jan 22, 2026
Version 8.0
Blog Post
3 MIN READ
Announcing General Availability (GA) of the New Message Trace in Exchange Online
How will this affect the logging to Splunk? Currently we use the https://splunkbase.splunk.com/app/4055 to onboard the following logs with separate inputs:
- Input Type = Management Activity; Content Type = Audit.Exchange, and
- Input Type = Message Trace
Would this change how the logs are ingested to Splunk?