Splunk server multiple IPs - same network -

[GArienti]

I have a server 2 ips in the same network, 2 servers merged over one in the past and we dediced to reuse the IP.
I'd like to consolidate them and only use 1 of them.

I was looking thru the logs of the server and I couldn't find any log that tells me who uses IP#1 and who uses IP#2 to input data in splunk

Is there a debug log I can enable to be able to see who uses my 2 different IPS!?!
I'd like to go arond and change all the inputs and forwarders to use the same IPs.
Thanks

[GArienti]

I think I found it, it's "metrics.log", right!?

I couldn't see it into splunk, for some reason it's not indexed on my server