Hi community,
I am new to Splunk and considering to evaluate it as our enterprise log collection and SIEM setup.
If I want to forward logs to a Splunk forwarder and then it forwards to a Splunk server, will the splunk server be able to parse the real IP address of the log source itself? Or will it see the splunk forwarder IP as the real source IP?
We want to forward all our server logs to this splunk forwarder, and then to server. But being able to see real IP addresses is what we are concerned with.
thanks
... View more