Splunk Search

Bind forwarder to particular IP

msarro
Builder

Hey everyone. I am trying to bind the forwarding service to a particular IP because one of the boxes we are using as a source is multihomed. First, is this possible? Second, how would I go about doing it? The hosts in question run on both Solaris and Linux.

Tags (1)
0 Karma

David
Splunk Employee
Splunk Employee

For binding the listening service, you should use this: http://www.splunk.com/base/Documentation/latest/Admin/BindSplunktoanIP

For controlling the path taken by the forwarding service, I believe Splunk will just use the OS level networking, so you would implement that with a static route (e.g., the linux route command).

Does that answer your question?

msarro
Builder

I'm going to have to try it out, I'll let you know! 🙂

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...