https://community.splunk.com/t5/Getting-Data-In/identify-the-sender-of-an-HEC-data-flow/m-p/679170#M113496 I’m afraid that there haven’t this kind of information unless your data didn’t contain it. Thu, 29 Feb 2024 16:43:09 GMT isoutamo 2024-02-29T16:43:09Z https://community.splunk.com/t5/Getting-Data-In/identify-the-sender-of-an-HEC-data-flow/m-p/679159#M113493 <P>i at all,</P><P>I'm ingesting data using HEC in a distributed infratructure using a Load Balancer to distribute traffic from many senders between our Heavy Forwarders.</P><P>Now, I need to identify the sender of each event, is there a meta-data that identify the hostname and IP address of each sender?</P><P>I didn't find it in HEC documentation.</P><P>Thank you for your support.</P><P>Ciao.</P><P>Giuseppe</P> Thu, 29 Feb 2024 16:03:29 GMT https://community.splunk.com/t5/Getting-Data-In/identify-the-sender-of-an-HEC-data-flow/m-p/679159#M113493 gcusello 2024-02-29T16:03:29Z https://community.splunk.com/t5/Getting-Data-In/identify-the-sender-of-an-HEC-data-flow/m-p/679170#M113496 I’m afraid that there haven’t this kind of information unless your data didn’t contain it. Thu, 29 Feb 2024 16:43:09 GMT https://community.splunk.com/t5/Getting-Data-In/identify-the-sender-of-an-HEC-data-flow/m-p/679170#M113496 isoutamo 2024-02-29T16:43:09Z