DHCP data into SPLUNK

[santosh11]

Dear All,

How can we send DHCP data into splunk?

What is the best way to push DHCP data into splunk? Is there any addons or we need to install UF in DHCP server?

Regards,
Santosh

[gcusello · Accepted solution]

Hi santosh11,
what's your DHCP server (Microsoft, Infoblox, etc...)?

Anyway, if possible the solution based on Universal Forwarding is always to prefer because UF manages load balancing, failueres, bandwidth optimization, etc...

When it isn't possible a solution based on UF, you can use other solutions (e.g. syslogs) but in this case you need some additional work to have a complete solution adding to your architecture two Heavy Forwarders and a Load Balancer to take syslogs without interruptions.

Ciao.
Giuseppe