I tried to whitelist an ip address for HEC log ingestion and got the error message
"Subnet overlaps Private IP block"
Does anyone know what this means?
Thanks
You are probably entering private IPs - or see this for Splunk's private IPs
https://docs.splunk.com/Documentation/SplunkCloud/latest/Config/ACSerrormessages