Deployment Architecture

Splunk server multiple IPs - same network -

GArienti
Explorer

I have a server 2 ips in the same network, 2 servers merged over one in the past and we dediced to reuse the IP.
I'd like to consolidate them and only use 1 of them.

I was looking thru the logs of the server and I couldn't find any log that tells me who uses IP#1 and who uses IP#2 to input data in splunk

Is there a debug log I can enable to be able to see who uses my 2 different IPS!?!
I'd like to go arond and change all the inputs and forwarders to use the same IPs.
Thanks

Tags (1)
0 Karma

GArienti
Explorer

I think I found it, it's "metrics.log", right!?

I couldn't see it into splunk, for some reason it's not indexed on my server

0 Karma
Get Updates on the Splunk Community!

New Cloud Intrusion Detection System Add-on for Splunk

In July 2022 Splunk released the Cloud IDS add-on which expanded Splunk capabilities in security and data ...

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...