I appologize if this is a double post. I don't know what happened to my previous attemt :P
In my environment the servers are configured with multiple IP addresses to add flexibility when moving services between hosts. bond0 is the host IP address, bond0.1 is the "service volume".
My forwarder is getting recognized from the bond0 ip address. I want it to be recognized from the bond0.1 address. I've tried the following change to the $SPLUNK_HOME/etc/splunk-launch.conf but this did not work:
SPLUNK_BINDIP={volume_IP_address}
-Thank you for any insight you can provide.