https://community.splunk.com/t5/Getting-Data-In/Where-does-host-come-from-in-the-Universal-Forwarder/m-p/70481#M14332 <P>It is set when the forwarder starts by executing the <CODE>hostname</CODE> command. In previous versions, the same command was run on first-time run of Splunk, and the result written into the inputs.conf file.</P> Wed, 30 Mar 2011 07:14:51 GMT gkanapathy 2011-03-30T07:14:51Z https://community.splunk.com/t5/Getting-Data-In/Where-does-host-come-from-in-the-Universal-Forwarder/m-p/70480#M14331 <P>With previous Splunk installations, at install time, the hostname was written to etc/system/local/inputs.conf. That doesn't appear to be created by the Universal Forwarder.</P> <P>Where does the hostname come from with the Universal Forwarder?</P> Wed, 30 Mar 2011 05:44:37 GMT https://community.splunk.com/t5/Getting-Data-In/Where-does-host-come-from-in-the-Universal-Forwarder/m-p/70480#M14331 vbumgarner 2011-03-30T05:44:37Z https://community.splunk.com/t5/Getting-Data-In/Where-does-host-come-from-in-the-Universal-Forwarder/m-p/70481#M14332 <P>It is set when the forwarder starts by executing the <CODE>hostname</CODE> command. In previous versions, the same command was run on first-time run of Splunk, and the result written into the inputs.conf file.</P> Wed, 30 Mar 2011 07:14:51 GMT https://community.splunk.com/t5/Getting-Data-In/Where-does-host-come-from-in-the-Universal-Forwarder/m-p/70481#M14332 gkanapathy 2011-03-30T07:14:51Z