Splunk Dev

Port number in event field

rs2OOO
New Member

Sorry for a beginners question, but I have been thrown in the deep end with this.

I have an error.log file, in the event part for each entry it shows [time] [error] [pid number] [IP address:Port number] and then some text.

Does the Port number refer to the IP address shown or to the server creating the error log?

Thanks.

Tags (1)
0 Karma

rs2OOO
New Member

Thanks, that's what I expected but had hoped it was showing the internal port number.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

There's a 99.9999% chance the port number refers to the IP address.

---
If this reply helps you, Karma would be appreciated.

woodcock
Esteemed Legend

I'd say 100%. That is standard network convention.

0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...