Is it possible cluster master returns fqdn instead of IP's of Indexers ? if yes please explain how ?
by adding this parameter to the /opt/splunk/etc/system/local/server.conf file
register_search_address = FQDN
you can do that it will allow your fqdn to reflect in as fqdn instead of IP
you can also put short name instead of fqdn whichever is preffered case.
by adding this parameter to the /opt/splunk/etc/system/local/server.conf file
register_search_address = FQDN
you can do that it will allow your fqdn to reflect in as fqdn instead of IP
you can also put short name instead of fqdn whichever is preffered case.
AFAIK, it is not possible. IMO, IP addresses are preferable so DNS lookup is not needed to communicate with the indexers. If you have a need for the CM to return FQDNs then suggest such a feature at https://ideas.splunk.com.