Whitelisting/Allow list for IP for HEC ingestion - Splunk Community

Getting Data In

I tried to whitelist an ip address for HEC log ingestion and got the error message

"Subnet overlaps Private IP block"

Does anyone know what this means?

Thanks

You are probably entering private IPs - or see this for Splunk's private IPs

https://docs.splunk.com/Documentation/SplunkCloud/latest/Config/ACSerrormessages

Get Updates on the Splunk Community!

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...