Splunk Search

I want IPs for Splunk Cloud indexers for firewall rules. How can I get a list?

khourihan_splun
Splunk Employee
Splunk Employee

I basically took the list if fqdn in outputs.conf and ran “host inputs1.example.splunkcloud.com” for each one.. then took the distinct values. is that valid? a better way?

0 Karma
1 Solution

khourihan_splun
Splunk Employee
Splunk Employee

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

View solution in original post

0 Karma

khourihan_splun
Splunk Employee
Splunk Employee

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

View solution in original post

0 Karma

kevincorder
New Member

Can you walk through how to do this?

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!