topic Re: How to create a new field and assign the hostname field using IP address in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439212#M76577 <P>I believe the OP wants to do DNS lookups at index time, not search time.</P> Mon, 12 Aug 2019 18:09:01 GMT richgalloway 2019-08-12T18:09:01Z How to create a new field and assign the hostname field using IP address https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439210#M76575 <P>Hi All,</P> <P>We are getting data from an application server for all servers and we are getting the IP address in dest_ip field. Now we like to exclude the servers from Linux and it would be difficult to use an IP address to filter the event. So we are looking for a way to perform DNSlookups and assign the hostname in the new field so that I can easily exclude it using regex. Please let me know how to create a new field and assign the hostname into it. </P> Mon, 12 Aug 2019 15:55:30 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439210#M76575 martinnepolean 2019-08-12T15:55:30Z Re: How to create a new field and assign the hostname field using IP address https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439211#M76576 <P>check this out, i believe ou will be on your way <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span><BR /> <A href="https://answers.splunk.com/answers/105246/dns-resolution-in-a-search.html">https://answers.splunk.com/answers/105246/dns-resolution-in-a-search.html</A><BR /> <A href="https://answers.splunk.com/answers/409036/how-to-a-dns-lookup-on-the-top-20-ip-results-retur.html">https://answers.splunk.com/answers/409036/how-to-a-dns-lookup-on-the-top-20-ip-results-retur.html</A></P> Mon, 12 Aug 2019 16:10:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439211#M76576 Sukisen1981 2019-08-12T16:10:55Z Re: How to create a new field and assign the hostname field using IP address https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439212#M76577 <P>I believe the OP wants to do DNS lookups at index time, not search time.</P> Mon, 12 Aug 2019 18:09:01 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439212#M76577 richgalloway 2019-08-12T18:09:01Z Re: How to create a new field and assign the hostname field using IP address https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439213#M76578 <P>Yeah, I like to perform dns lookup at index time</P> Tue, 13 Aug 2019 07:24:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-new-field-and-assign-the-hostname-field-using-IP/m-p/439213#M76578 martinnepolean 2019-08-13T07:24:55Z