Feedback
Got feedback? We want it! Submit your comments and suggestions for our community here.

How do you get a device name in Splunk given device IP Adress

waJesu
Path Finder

I need help on how to get a device name when IP is provided.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Create a lookup table to map IP addresses to device names and use the lookup command.

Or use DNS lookup.  Note, this usually does not with internal addresses.

| lookup dnslookup clientip as ip output clienthost as dns
---
If this reply helps you, Karma would be appreciated.
0 Karma

waJesu
Path Finder

Unfortunately I am working with internal addresses. Would you have something that works with internal IPs. This a good search though. I will keep it for the future.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...