Chat now with support
Chat with Support

Unified Communications Analytics 8.6 - Deployment Guide

Prerequisites for your installation Installing UC Analytics Configuring UC Analytics Adding data sources for Active Directory or Azure Active Directory Adding data sources, chargeback costs, and thresholds for Exchange and Exchange Online
Permissions needed to collect Exchange on-premises or hybrid data Permissions needed to collect from native Exchange Online Creating an Exchange Configuration data source Creating an Exchange Tracking Logs data source Creating an Exchange Mailbox Contents data source Do I need both Exchange Tracking Logs and Exchange Mailbox Contents collections? Creating an Exchange IIS Logs data source Creating an Exchange Mailbox Content Summary data source Creating an Exchange Calendar data source Creating an Exchange Public Folders data source Adding Exchange Online hybrid data sources for hybrid Office 365 Adding Exchange Online data sources for native Office 365 Setting chargeback costs for Exchange Setting thresholds for Exchange metrics Omitting words when filtering by subject or body
Adding data sources, chargeback costs, and thresholds for Skype for Business/Lync Adding data sources, chargeback, and thresholds for Cisco Managing which insights can seen by users Configuring and managing subscriptions Making changes to your deployment Appendix A:Configuring Impersonation Appendix B:Configuring the Skype for Business or Lync Server Appendix C:Configuring IIS Log Files to capture ActiveSync or OWA events Appendix D:PowerShell cmdlets used by data sources Appendix E:Custom configurations and backup and recovery options Appendix F: Questions and answers about configuration

Adding data sources, chargeback costs, and thresholds for Exchange and Exchange Online

Permissions needed to collect Exchange on-premises or hybrid data

To collect data from Exchange, you add different data sources to gather information. For each data source, you must specify the credential that is used to collect the data. In most collections, you have the option to use the credential that is specified for the Data Engine service. If you want to use that credential for your data collections, ensure it has the permissions specified for that data source.

By default, a target environment is configured for the Active Directory forest in which UC Analytics is installed.

In the Active Directory forest environment, you can create the following data sources to collect data from both on-premise Exchange and hybrid Exchange Online:

Exchange Configuration: This data source collects Exchange configuration and mailbox properties using PowerShell and Active Directory LDAP queries. For information about the required permissions, see Permissions needed for the Exchange Configuration data source .
Exchange Tracking Logs: This data source collects message traffic and DLP rule match data from the Exchange tracking logs. For information about the required permissions, see Permissions needed for the Exchange Tracking Logs data source .
Exchange Mailbox Contents: This data source collects mailbox contents from on-premise Exchange using Exchange Web Service (EWS). For information about the required permissions, see Permissions needed for Exchange Mailbox Contents, Exchange Mailbox Content Summary, or Exchange Calendar data sources .
Exchange IIS Logs: This data source collects ActiveSync information about ActiveSync mobile devices from IIS logs. Also used to collect Outlook in the Web (OWA) logon details. For information about the required permissions, see Permissions needed for the Exchange IIS Logs (ActiveSync and OWA) data source .
Exchange Mailbox Content Summary: This data source collects mailbox folder statistics including size, item count, and number of subfolders using LDAP and Exchange Web Services (EWS) for mailbox folders such as the Outbox, Deleted Items, Junk E-Mail. For information about the required permissions, see Permissions needed for Exchange Mailbox Contents, Exchange Mailbox Content Summary, or Exchange Calendar data sources .
Exchange Calendar: This data source collects information about the Exchange calendar items created in Outlook (including organizer, attendees, duration, location, and size) using LDAP and Exchange Web Services (EWS) for specific or all mailboxes. For information about the required permissions, see Permissions needed for Exchange Mailbox Contents, Exchange Mailbox Content Summary, or Exchange Calendar data sources .
Exchange Public Folders: This data source collects legacy public folder data from Exchange 2010 and new public folder data from on-premises Exchange 2013/2016/2019. For information about the required permissions, see Permissions needed for the Exchange Public Folders data source .
Exchange Online Public Folders: This data source can collect public folder statistics and configuration information from either hybrid or native Office 365 using PowerShell. For information about the required permissions, see Permissions needed for the Exchange Online Public Folders data source .
Exchange Online Hybrid User Configuration: This data source collects detailed information about users and distribution groups in a hybrid environment using remote PowerShell. See Permissions needed for the Exchange Online Hybrid User Configuration data source .
Exchange Online Hybrid Mailbox Configuration: This data source collects Exchange Online mailbox statistics such as mailbox size, permissions, and mobile devices from hybrid (on-premise and Office 365) environments. For information about the required permissions, see Permissions needed for the Exchange Online Hybrid Mailbox Configuration data source .
Exchange Online Mailbox Contents: This data source collects mailbox content information from hybrid or native Office 365 using Exchange Web Services (EWS). For information about the required permissions, see Permissions needed for Exchange Online Mailbox Contents data .
Exchange Online Mailbox Content Summary: This data source collects mailbox folder statistics including size, item count, and number of subfolders, from hybrid or native Office 365 using Exchange Web Services (EWS). For information about the required permissions, see Permissions needed for Exchange Online Mailbox Content Summary and Exchange Online Calendar data .
Exchange Online Calendar: This data source collects information about the Exchange calendar items created in Outlook (including organizer, attendees, duration, location, and size) rom hybrid or native Office 365 using Exchange Web Services (EWS) for specific or all mailboxes. For information about the required permissions, see Permissions needed for Exchange Online Mailbox Content Summary and Exchange Online Calendar data .

When the credential used in a data source must be a member of an Exchange role group, it is important to add the account to the role group correctly. If you simply add a user to a group using Active Directory Users & Computers, (ADUC) utility, the user is not granted the full rights of the Exchange group role. In this case, the data source permissions are not met.

To provide the full grant of an Exchange admin role group to an account, you must use the PowerShell Exchange cmdlet Add-ExchangeAdministrator or the Exchange Admin Center (EAC).

Permissions needed for the Exchange Configuration data source

The credentials that are used to collect Exchange configuration and mailbox properties through PowerShell and LDAP must be a member of specific security groups.

For Exchange 2010-only, Exchange 2013-only, Exchange 2016-only, or Exchange 2019-only environments, or Exchange mixed environments, the credential must:

Permissions needed for the Exchange Tracking Logs data source

For Exchange tracking logs, the specified credentials are used to collect message traffic and DLP incident data from the Exchange message tracking logs. (DLP data is collected only for Exchange 2013 and later.) The credentials must:

You can gather Exchange message tracking logs from any of the following locations:

For information about gathering historical tracking logs from a centralized location, see About collecting historical tracking logs .

By default, the Exchange message tracking log folder is located as follows:

\\ServerName\c$\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking
\\ServerName\c$\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking
Related Documents