https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101465#M21271 <P>add the following to your inputs.conf stanza:</P> <P>connection_host = dns</P> Mon, 26 Mar 2012 18:00:26 GMT mikelanghorst 2012-03-26T18:00:26Z https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101464#M21270 <P>I am using splunk as our syslog server. I am new to splunk and everything about it. Currently the data coming in is from various routers and switches. The hostnames are that of the IP address of the devices. Is there a way to change the hostname by the name found in the source log?</P> Mon, 26 Mar 2012 17:31:43 GMT https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101464#M21270 awilkoski 2012-03-26T17:31:43Z https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101465#M21271 <P>add the following to your inputs.conf stanza:</P> <P>connection_host = dns</P> Mon, 26 Mar 2012 18:00:26 GMT https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101465#M21271 mikelanghorst 2012-03-26T18:00:26Z https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101466#M21272 <P>I see I have two inputs.conf files. Which one am I supposed to be modifing? Also should that be added under the UDP section? If so then I am not seeing UDP in either file. </P> Mon, 26 Mar 2012 19:10:45 GMT https://community.splunk.com/t5/Getting-Data-In/Hostname-Change/m-p/101466#M21272 awilkoski 2012-03-26T19:10:45Z