https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377086#M68237 <P>We are able to match entries in props.conf using the hostname... unless that hostname has a hyphen. Then, for whatever reason, it never matches. See example below:</P> <P>[host::server1.example.com]<BR /> TRANSFORMS-server1 = route_to_idx1</P> <H3>This works</H3> <P>[host::server-2.example.com]<BR /> TRANSFORMS-server2 = route_to_idx2</P> <H3>This doesn't work</H3> Tue, 29 Sep 2020 19:22:50 GMT carlosumbc 2020-09-29T19:22:50Z https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377086#M68237 <P>We are able to match entries in props.conf using the hostname... unless that hostname has a hyphen. Then, for whatever reason, it never matches. See example below:</P> <P>[host::server1.example.com]<BR /> TRANSFORMS-server1 = route_to_idx1</P> <H3>This works</H3> <P>[host::server-2.example.com]<BR /> TRANSFORMS-server2 = route_to_idx2</P> <H3>This doesn't work</H3> Tue, 29 Sep 2020 19:22:50 GMT https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377086#M68237 carlosumbc 2020-09-29T19:22:50Z https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377087#M68238 <P>Hi @carlosumbc ,</P> <P>Please use <CODE>*</CODE> instead of <CODE>-</CODE> and try.</P> <PRE><CODE>[host::server*2.example.com] TRANSFORMS-server2 = route_to_idx2 </CODE></PRE> <P>Let me know if that works.</P> <P>Thank You!</P> Thu, 25 Oct 2018 11:13:52 GMT https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377087#M68238 MousumiChowdhur 2018-10-25T11:13:52Z https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377088#M68239 <P>@carlosumbc, please keep in mind that we can use wildcards (*) and regex in the host and source stanzas. </P> Thu, 25 Oct 2018 11:20:12 GMT https://community.splunk.com/t5/Getting-Data-In/props-conf-hostname-with-hyphen/m-p/377088#M68239 ddrillic 2018-10-25T11:20:12Z