We have around 230 PCs servers spelunking to a single splunk server across a firewall. Many of these clients are not logging data and show connection and timeout errors in splunkd log etc. After some research I have seen suggestions that incorrectly configured reverse DNS may be a cause. Simple question is do the splunk inputs dedicated to universal forwarders need configuration regarding DNS? I thought that the hostname was provided by the splunk forwarder config files rather than DNS. Am I confusing other inputs with which need this? Any advice gratefully received. ... View more