I want IPs for Splunk Cloud indexers for firewall rules. How can I get a list?

[khourihan_splun]

I basically took the list if fqdn in outputs.conf and ran “host inputs1.example.splunkcloud.com” for each one.. then took the distinct values. is that valid? a better way?

[khourihan_splun · Accepted solution]

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

[kevincorder]

Can you walk through how to do this?