Can a Universal Forwarder report an internal IP?

CMSchelin · ‎09-09-2022

As the question says: can a Universal Forwarder report an internal IP? It can clearly report the external IP, but that's not useful to me.

richgalloway · ‎09-09-2022

Please describe the problem you are trying to solve. Report the IP address to whom? I've seen plenty of UFs report internal IP addresses without special consideration so I'm not sure why you are seeing external addresses. Where are you seeing the IP addresses?

---
If this reply helps you, Karma would be appreciated.

isoutamo · ‎09-09-2022

Can you declare what you are meaning with internal and external IPs?

Can a Universal Forwarder report an internal IP?

universal forwarder

Bridging the Gap: Splunk Helps Students Move from Classroom to Career

Preparing your Splunk Environment for OpenSSL3

Unleash Unified Security and Observability with Splunk Cloud Platform