Skip to main content
Lantern Home

 

Splunk Lantern

DHCP data

  1. Last updated
  2. Save as PDF

 

DHCP is the network protocol most client devices use to associate themselves with an IP network. Implemented via a DHCP server, which could be standalone or embedded in a router or other network appliance, DHCP provides network clients with critical network parameters including IP address, subnet mask, network gateway, DNS servers, WINS or other name servers, time servers (NTP), a host and domain name, and the address of other optional network services. DHCP logs show exactly which systems are connecting to a network, their IP and MAC addresses, when they connect and for how long. In the Common Information Model, DHCP data is typically mapped to the Network Sessions data model. 

Before looking at documentation for specific data sources, review the Splunk Docs information on general data ingestion: 

Common data sources

Use cases for the Splunk platform