Splunk Search

Bind forwarder to particular IP

msarro
Builder

Hey everyone. I am trying to bind the forwarding service to a particular IP because one of the boxes we are using as a source is multihomed. First, is this possible? Second, how would I go about doing it? The hosts in question run on both Solaris and Linux.

Tags (1)
0 Karma

David
Splunk Employee
Splunk Employee

For binding the listening service, you should use this: http://www.splunk.com/base/Documentation/latest/Admin/BindSplunktoanIP

For controlling the path taken by the forwarding service, I believe Splunk will just use the OS level networking, so you would implement that with a static route (e.g., the linux route command).

Does that answer your question?

msarro
Builder

I'm going to have to try it out, I'll let you know! 🙂

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...