Deployment Architecture

Splunk server multiple IPs - same network -


I have a server 2 ips in the same network, 2 servers merged over one in the past and we dediced to reuse the IP.
I'd like to consolidate them and only use 1 of them.

I was looking thru the logs of the server and I couldn't find any log that tells me who uses IP#1 and who uses IP#2 to input data in splunk

Is there a debug log I can enable to be able to see who uses my 2 different IPS!?!
I'd like to go arond and change all the inputs and forwarders to use the same IPs.

Tags (1)
0 Karma


I think I found it, it's "metrics.log", right!?

I couldn't see it into splunk, for some reason it's not indexed on my server

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...