DNS Name and not IP for TCPOUT in outputs.conf

[treinke]

Can I use an DNS name and not the ip address of the server in the TCPOUT stanza in outputs.conf?

Exaple:

[tcpout]
defaultGroup=Group1

[tcpout:Group1]
server=splunk.group1.company.com:9997

Currently I have:

[tcpout]
defaultGroup=Group1

[tcpout:Group1]
server=10.10.10.100:9997

In the documentation it always references an ip address http://www.splunk.com/base/Documentation/latest/admin/Outputsconf

[Simeon · Accepted solution]

Splunk can be setup to use the FQDN in lieu of the IP address. In most situations where an ip address is used, we will do a local DNS lookup at startup to find the address to associate with the IP.