- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is it possible cluster master returns fqdn instead of IP's of Indexers ? if yes please explain how ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
by adding this parameter to the /opt/splunk/etc/system/local/server.conf file
register_search_address = FQDN
you can do that it will allow your fqdn to reflect in as fqdn instead of IP
you can also put short name instead of fqdn whichever is preffered case.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
by adding this parameter to the /opt/splunk/etc/system/local/server.conf file
register_search_address = FQDN
you can do that it will allow your fqdn to reflect in as fqdn instead of IP
you can also put short name instead of fqdn whichever is preffered case.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


AFAIK, it is not possible. IMO, IP addresses are preferable so DNS lookup is not needed to communicate with the indexers. If you have a need for the CM to return FQDNs then suggest such a feature at https://ideas.splunk.com.
If this reply helps you, Karma would be appreciated.
