Why is wrong network card being discovered?

SUMMARY

Sep 21, 2016

Symptom

The Override detected DNS Name with is working but picks up the wrong network card and is trying to send events out on the wrong network interface.  Sometimes it is the first network interface but on some machines it is using other interfaces.

Resolution

If Use Host IP Address Override for source address  is selected, then your IP is getting overridden.

Way it works is Windows asks for a list of adapters. Then it takes the first IP off the first adapter. Windows sorts them by name but the API doesn't give them back in this order. The first adapter in the system is used, and not the first named adapter.

To see which card has the highest priority (first), start a command prompt as Administrator.  Execute:

netstat -rn

You would then be able to change the windows bindings and then restart the agent.