Can I use an DNS name and not the ip address of the server in the TCPOUT stanza in outputs.conf?
Currently I have:
In the documentation it always references an ip address
Splunk can be setup to use the FQDN in lieu of the IP address. In most situations where an ip address is used, we will do a local DNS lookup at startup to find the address to associate with the IP.
View solution in original post