Solved

DNS lookup in Splunk

Posted on 2010-11-16
1
1,634 Views
Last Modified: 2012-05-10
Hi
We are currently testing out Splunk to monitor our Cisco ASA 5510 firewall, but running into a problem. Because we are using a DHCP server on all client PCs,  just having IP address in the event data is no good. I need the source IP address in the event data for each entry to be converted to the clients name and sorted with the database.
Is this possible and how?
0
Comment
Question by:COMPSUPP
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 4

Accepted Solution

by:
eggm4n earned 500 total points
ID: 34146546
Have you looked into Splunk Reverse DNS for fields?  It replaces IP addresses in specified fields with the results of a DNS lookup.  It should work with DHCP

http://splunkbase.splunk.com/apps/All/app:Splunk%20reverse%20DNS%20lookup%20for%20fields
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Layer 3 Switch Configuration 12 87
Cisco 3650x ACL 8 51
CNAME Issue for internal redirect 34 27
DNS logs 1 33
There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
Concerto Cloud Services, a provider of fully managed private, public and hybrid cloud solutions, announced today it was named to the 20 Coolest Cloud Infrastructure Vendors Of The 2017 Cloud  (http://www.concertocloud.com/about/in-the-news/2017/02/0…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question