Getting Data In

Can a Universal or Heavy forwarder send (output) data to a dns name rather than an IP address?

Log_wrangler
Builder

I have a scenario where data from a fwdr needs to go to a dns name (load balancer) instead of IP.

Please advise if this is possible (with an example conf please).

Thank you

0 Karma
1 Solution

FrankVl
Ultra Champion

Using a DNS name works just fine in your outputs.conf.

View solution in original post

0 Karma

FrankVl
Ultra Champion

Using a DNS name works just fine in your outputs.conf.

0 Karma

Log_wrangler
Builder

Specify a target group for a hostname which consists of a single receiver.

[tcpout:group2]
server=myhost.Splunk.com:9997

am I correct from this example, it is possible?? just need confirmation and advice if there is any kind of problem that can occur with using a DNS name. But in my case, its going to a 3rd party (nifi processor) so the name and port will be differente.

thank you.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...