topic Re: Splunk DB connect Host Field Value from DB in Deployment Architecture https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52700#M22278 <P>Look at <BR /> Dynamically set the default host value<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Data/setadefaulthostforaninput">http://docs.splunk.com/Documentation/Splunk/6.0.1/Data/setadefaulthostforaninput</A><BR /> If you export your hostname as another name and use this method, you should be able to set the host based on a field returned.</P> Fri, 14 Feb 2014 17:34:21 GMT aelliott 2014-02-14T17:34:21Z Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52693#M22271 <P>hi</P> <P>I lately started to use Splunk db connect, and need to create an input that contains entries from different hosts.<BR /> is there any way that the host field value will be a column in the result of the SQL query, and not a constant value?</P> <P>I tried to just name one of the columns 'host', but it didn't work.</P> Sun, 01 Sep 2013 14:55:02 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52693#M22271 pembleton 2013-09-01T14:55:02Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52694#M22272 <P>Specific information a little more is required for me to answer.</P> <P>↓Is not it's not the kind of thing?<BR /> SELECT *,"HOSTNAME_XXX" as host FROM TableName</P> Mon, 02 Sep 2013 01:10:21 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52694#M22272 HiroshiSatoh 2013-09-02T01:10:21Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52695#M22273 <P>A host by any other name is still a host.<BR /><BR /> Why not name the field/column dbhost?<BR /> That way you will know which 'host' it came from, and also be able to identify the 'host' from within the source.</P> Mon, 02 Sep 2013 01:14:19 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52695#M22273 lukejadamec 2013-09-02T01:14:19Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52696#M22274 <P>Please forgive me because it is not good at English I.<BR /> Or that we also wish to retrieve the host name of the target DB on the results of SQL?</P> <P>(For example, if MySQL)<BR /> select A,B,C, substring(CURRENT_USER(),locate("@",CURRENT_USER())+1) as host from TableName</P> Mon, 28 Sep 2020 14:41:50 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52696#M22274 HiroshiSatoh 2020-09-28T14:41:50Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52697#M22275 <P>as i said above, naming one of the columns 'host' doesn't work...</P> Mon, 02 Sep 2013 07:41:37 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52697#M22275 pembleton 2013-09-02T07:41:37Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52698#M22276 <P>no, this doesn't work for me either. the host field is ignored</P> Fri, 14 Feb 2014 16:58:16 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52698#M22276 d1rtym0nk3y 2014-02-14T16:58:16Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52699#M22277 <P>You could name it DBHost and use that in searches etc..</P> Fri, 14 Feb 2014 17:23:40 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52699#M22277 aelliott 2014-02-14T17:23:40Z Re: Splunk DB connect Host Field Value from DB https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52700#M22278 <P>Look at <BR /> Dynamically set the default host value<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Data/setadefaulthostforaninput">http://docs.splunk.com/Documentation/Splunk/6.0.1/Data/setadefaulthostforaninput</A><BR /> If you export your hostname as another name and use this method, you should be able to set the host based on a field returned.</P> Fri, 14 Feb 2014 17:34:21 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-DB-connect-Host-Field-Value-from-DB/m-p/52700#M22278 aelliott 2014-02-14T17:34:21Z