https://community.splunk.com/t5/Getting-Data-In/displays-multiple-hostname-in-search-result/m-p/28249#M4810 <P>Good day!can someone help me, i am newbie here in splunk..i just dont understand why splunk displays same hostname in search result but the other one has a suffix domain.</P> <P>i.e.: </P> <P>hostname1</P> <P>hostname1.domain.com</P> Thu, 08 Aug 2013 07:14:11 GMT melfice0023 2013-08-08T07:14:11Z https://community.splunk.com/t5/Getting-Data-In/displays-multiple-hostname-in-search-result/m-p/28249#M4810 <P>Good day!can someone help me, i am newbie here in splunk..i just dont understand why splunk displays same hostname in search result but the other one has a suffix domain.</P> <P>i.e.: </P> <P>hostname1</P> <P>hostname1.domain.com</P> Thu, 08 Aug 2013 07:14:11 GMT https://community.splunk.com/t5/Getting-Data-In/displays-multiple-hostname-in-search-result/m-p/28249#M4810 melfice0023 2013-08-08T07:14:11Z https://community.splunk.com/t5/Getting-Data-In/displays-multiple-hostname-in-search-result/m-p/28250#M4811 <P>try host= <HOST name=""> in inputs.conf in forwarder side and just check you are getting single host or not</HOST></P> Thu, 08 Aug 2013 08:14:50 GMT https://community.splunk.com/t5/Getting-Data-In/displays-multiple-hostname-in-search-result/m-p/28250#M4811 kml_uvce 2013-08-08T08:14:50Z