All Apps and Add-ons

Problem resolving DNS outside of Domain name,



I´ve been working with lookup and its working fine, I used this :

" | lookup dnslookup clientip
as src OUTPUT clienthost | table _time clienthost src "

It can resolve Publics IPs by his www hostname but somehow the internal IP just resolve the IP that are within the windows Domains, the others IP that are internal but no in the domains, can not.

alt text

I tried to review the DNS ( cat /etc/resolv.conf) of the SPLUNK Search, and this is the results,

cat /etc/resolv.conf

[root@genosis ~]# cat /etc/resolv.conf

Generated by NetworkManager

[root@genosis ~]#

I tested in my Pc , that it has the same DNS and I got this result

alt text

Do you have any idea, how can I put this resolved address in the clienthost field?

0 Karma
Get Updates on the Splunk Community!

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...