topic Is it possible to define a server class via IP address and not via hostname? in Splunk Search

Is it possible to define a server class via IP address and not via hostname?

vad34 — Sun, 20 Dec 2015 09:48:48 GMT

Hi,

Is it possible to define Server Class via IP address and not via host name in Select Forwarders section when creating in Add data section?

Tnx

Re: Is it possible to define a server class via IP address and not via hostname?

jkat54 — Sun, 20 Dec 2015 22:37:43 GMT

You'll have to forgive me as I've never seen this page before. I've found what you're seeing though:

http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/Forwarddata

Try going this way instead: go to settings -> Forwarder Management.

Once there, you can click on server classes and so on. I'm not 100% certain this shows up on an indexer/deployment server combo as I've always kept deployment separate.

If that doesn't work maybe someone can show you how to edit your serverclass.conf manually to configure forwarders.

Re: Is it possible to define a server class via IP address and not via hostname?

vad34 — Sun, 20 Dec 2015 22:37:44 GMT

Tnx for reply, can u pls guide me how to use IP adress for matching forwarders to add server classes?

Re: Is it possible to define a server class via IP address and not via hostname?

jkat54 — Sun, 20 Dec 2015 22:37:45 GMT

I downvoted this post because this should be a comment not an answer. downvoting so it falls to bottom of page.

Re: Is it possible to define a server class via IP address and not via hostname?

vad34 — Sun, 20 Dec 2015 22:37:46 GMT

tnx for your reply,
but i want to select ip addresses instead hostnames in Select Forwarders screen
How can i do it?

Re: Is it possible to define a server class via IP address and not via hostname?

woodcock — Mon, 21 Dec 2015 21:00:28 GMT

Yes, your whitelist can have IP addresses or hostnames (or client names, if you set that up in deploymentclient.conf).

Re: Is it possible to define a server class via IP address and not via hostname?

jkat54 — Thu, 31 Dec 2015 09:29:22 GMT

Did you try this instead?

go to settings -> Forwarder Management.

Once there, you can click on server classes and so on. I'm not 100% certain this shows up on an indexer/deployment server combo as I've always kept deployment separate.