topic Re: Assets,csv nt_host in Getting Data In

Assets,csv nt_host

daniel333 — Sat, 20 Feb 2016 02:35:42 GMT

All,

Building my Assets.csv file for ES. Just curious about the nt_host field. Is this required? For example with my Linux hosts so I need to go ahead and still fill it out with the Linux server name? Harmful to do so? Harmful to not?

Re: Assets,csv nt_host

timm747747 — Tue, 06 Dec 2016 14:39:44 GMT

We have ours populated with nix hosts. Not harmful at all.

Re: Assets,csv nt_host

jpeoples — Tue, 29 Sep 2020 13:52:56 GMT

...a million years later....

Here Splunk says that one of the fields ( ip | mac | nt_host | dns) is required. So I believe as long as you have ONE of the other fields nt_hosts isn't required. With that being said I have the same question. It sounds like this will function but would it hurt to put the Linux server's hostnames there for reference?

http://docs.splunk.com/Documentation/ES/4.7.0/Admin/Formatassetoridentitylist#Asset_lookup_header