Splunk Search

I want IPs for Splunk Cloud indexers for firewall rules. How can I get a list?

khourihan_splun
Splunk Employee
Splunk Employee

I basically took the list if fqdn in outputs.conf and ran “host inputs1.example.splunkcloud.com” for each one.. then took the distinct values. is that valid? a better way?

0 Karma
1 Solution

khourihan_splun
Splunk Employee
Splunk Employee

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

View solution in original post

khourihan_splun
Splunk Employee
Splunk Employee

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

kevincorder
New Member

Can you walk through how to do this?

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...