Splunk Search

I want IPs for Splunk Cloud indexers for firewall rules. How can I get a list?

khourihan_splun
Splunk Employee
Splunk Employee

I basically took the list if fqdn in outputs.conf and ran “host inputs1.example.splunkcloud.com” for each one.. then took the distinct values. is that valid? a better way?

0 Karma
1 Solution

khourihan_splun
Splunk Employee
Splunk Employee

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

View solution in original post

0 Karma

khourihan_splun
Splunk Employee
Splunk Employee

try this:

for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do dig +short inputs$i.STACKNAME.splunkcloud.com; done |sort -u

View solution in original post

0 Karma

kevincorder
New Member

Can you walk through how to do this?

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!