Hello,
I want to find out all hosts (Azure VMs) which are sending log data to GrayLog/Elastic. Is it possible to get the ip address of the host. I used the query below and its giving me the hostname. Unfortunatelly this is overwritten by some admins and does not show me the VM name in Azure.
Is it possible to extract the IP address of the VM sending logs?
Hello AdamC,
yes, the sources it returns the same information as my query above. As said, the problem is that on some machines the hostname is overwritten and not the same as the one used in Azure.
Thats the reason why I like to get to the ip address.