Solved

DNS lookup in Splunk

Posted on 2010-11-16
1
1,586 Views
Last Modified: 2012-05-10
Hi
We are currently testing out Splunk to monitor our Cisco ASA 5510 firewall, but running into a problem. Because we are using a DHCP server on all client PCs,  just having IP address in the event data is no good. I need the source IP address in the event data for each entry to be converted to the clients name and sorted with the database.
Is this possible and how?
0
Comment
Question by:COMPSUPP
1 Comment
 
LVL 4

Accepted Solution

by:
eggm4n earned 500 total points
ID: 34146546
Have you looked into Splunk Reverse DNS for fields?  It replaces IP addresses in specified fields with the results of a DNS lookup.  It should work with DHCP

http://splunkbase.splunk.com/apps/All/app:Splunk%20reverse%20DNS%20lookup%20for%20fields
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now