Multiple Intermediate Forwarders (internal/external) for mobile clients

[trross33]

Does anyone know of any solution that will allow me to install a SPLUNK universal forwarder on a laptop and when the laptop is located on a corporate network it will utilize an "Internal" intermediate forwarder forwarder? However, when the laptop is on the internet (or external network), it will utilize a second "external" intermediate forwarder. Any help would be greatly appreciated. Thanks!

[ziegfried · Accepted solution]

How about having 2 different DNS Host records with the same name? On the internal DNS pointing to the internal intermediate forwarder in the private IP range, the other one published to the Interned pointing to external forwarder with the public IP.