Splunk Enterprise Security

Whois specify a WHOIS server (*nix -h flag)

haraksin
Communicator

Similar to https://answers.splunk.com/answers/642213/nslookup-on-network-tools-app-with-specified-dns-s.html

First off, fantastic app; I'm really getting a lot of use out of specifically the prebuilt workflow actions!

I'm curious if there is any way I can specify a whois server with the command? I have a bunch of non-public data on my personal whois server that isn't getting read... I'm not sure I'm good enough to make a PR for this in the repo.

Thanks for the help!

0 Karma

haraksin
Communicator

This doesn't have to be in the search bar, it could even be in the network_tools.conf file...

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...