I know the heroku logs are labeled with the process (web.1, web.2, etc) but if you authorize a set of IPs to splunk and then add 10 more instances with heroku,

I know the heroku logs are labeled with the process (web.1, web.2, etc) but if you authorize a set of IPs to splunk and then add 10 more instances with heroku, I would imagine splunk would reject the new IPs. I'm curious if the heroku log drain always comes from the same set of IPs regardless of the dyno.