Whitelisting/Allow list for IP for HEC ingestion

[Timaaj]

I tried to whitelist an ip address for HEC log ingestion and got the error message

"Subnet overlaps Private IP block"

Does anyone know what this means?

Thanks

[bowesmana]

You are probably entering private IPs - or see this for Splunk's private IPs

https://docs.splunk.com/Documentation/SplunkCloud/latest/Config/ACSerrormessages