cancel
Showing results for 
Search instead for 
Did you mean: 
kmc
Level 12

WMI Data-Source configuration for Windows server with Two IP's configured

Jump to solution

Hi Guys,

I need help with the WMI data-source configuration, how we can configure WMI data source for server with two IP's?

consider example server with two IP address: 100:100:100:28 and 100.200.0.28

i have configured data-source with IP address 100:100:100:28,  is this enough to send logs from server to SIEM? or any other settings we have to configure?

kindly assist and let me know if i missed anything here.

0 Kudos
1 Solution

Accepted Solutions
sssyyy
Level 12

Re: WMI Data-Source configuration for Windows server with Two IP's configured

Jump to solution

I imagine one IP address is sufficient, otherwise you'll get duplicate set of logs, as they are essentially the same host...

0 Kudos
2 Replies
sssyyy
Level 12

Re: WMI Data-Source configuration for Windows server with Two IP's configured

Jump to solution

I imagine one IP address is sufficient, otherwise you'll get duplicate set of logs, as they are essentially the same host...

0 Kudos
akerr
Level 9

Re: WMI Data-Source configuration for Windows server with Two IP's configured

Jump to solution

Assuming you're picking them up with WMI, I would only add it once as sssyyy said.

If you're using the agent, you'll want to pick the interface in the agent and use the matching IP address on the receiver to make sure the logs arrive.

0 Kudos