All Apps and Add-ons

Splunk Add-on for Infoblox: Why am I getting DNS, DHCP, Log Data into Splunk but other syslog type data in the syslog is not being index into splunk its being left?


We have a clustered environment, we have the Splunk Add On for Infoblox setup and configuered. We are getting the DNS Captures and the DHCP and DNS data from the logs over UDP port. This seems to be working fine. The other piece of this though is the actual syslog data. We are also trying to send that over UDP port, and we are not getting any of the syslog sourcetype data in splunk.

Is there something special we have to do with splunk or infoblox?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...