https://community.splunk.com/t5/Getting-Data-In/How-does-WinNetMon-determine-RemoteHostName/m-p/420644#M74030 <P>i'm trying to figure out how/when/where Splunk resolves the RemoteHostName field in WinNetMon. I assume this is done using DNS or local hosts files, but is it done by the Forwarder, Indexer, or Search Head?</P> Wed, 12 Jun 2019 17:48:15 GMT templets 2019-06-12T17:48:15Z https://community.splunk.com/t5/Getting-Data-In/How-does-WinNetMon-determine-RemoteHostName/m-p/420644#M74030 <P>i'm trying to figure out how/when/where Splunk resolves the RemoteHostName field in WinNetMon. I assume this is done using DNS or local hosts files, but is it done by the Forwarder, Indexer, or Search Head?</P> Wed, 12 Jun 2019 17:48:15 GMT https://community.splunk.com/t5/Getting-Data-In/How-does-WinNetMon-determine-RemoteHostName/m-p/420644#M74030 templets 2019-06-12T17:48:15Z