Getting Data In

Can I specify a name server for DNS

echalex
Builder

Hi,

We are having some DNS issues in our infrastructure. Apparently the name servers our splunk hosts are using are not able to resolve some PTR queries, because of our network topology. Unfortunately, simply editing /etc/resolv.conf would also break stuff. So I need to use a different name server than the system is using by default. Is this possible?

Tags (2)
0 Karma
1 Solution

yannK
Splunk Employee
Splunk Employee

not sure, Splunk will use a system call for the resolution, so your default DNS will be used.

View solution in original post

pryzrak
Path Finder

Not sure if this post is still being reviewed. However I now have a working python script that resolves from IP to HOST and HOST to IP using an external nameserver like the open Google DNS. Look at my above post to see the answer.

0 Karma

pryzrak
Path Finder

I know it is possible if the dnspython module is installed. I tried it with a successful standalone script. However I'm trying to edit a renamed external_lookup.py script as something like "opendns_lookup.py". Then I edited the transforms.conf to make a new command called "opendnslookup". However I can't get "opendns_lookup.py" to work right. Look at my splunk post below on this matter and let me know what yall think:

Editing dnslookup for specific dns server

0 Karma

yannK
Splunk Employee
Splunk Employee

not sure, Splunk will use a system call for the resolution, so your default DNS will be used.

echalex
Builder

Thanks, yannK.

That is what I suspected. Even the reverse dns lookup script will use the default configuration. Of course, I can do my own reverse lookup script in eg. perl.

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...