https://community.splunk.com/t5/Getting-Data-In/Can-t-find-where-data-is-originating-from-wrong-hostname/m-p/555442#M91998 <P>Hello,</P><P>please vote this idea :&nbsp;<A href="https://ideas.splunk.com/ideas/EID-I-1034" target="_blank">https://ideas.splunk.com/ideas/EID-I-1034</A></P><P><SPAN>Apart from using a 'host' field to store information about host where the issue originates from, it would be good to introduce a special field (eg. similar to _indextime) which would store the forwarder's IP or hostname visible from the network's point of view.</SPAN></P><P>Thanks.</P> Fri, 11 Jun 2021 07:00:01 GMT splunkreal 2021-06-11T07:00:01Z https://community.splunk.com/t5/Getting-Data-In/Can-t-find-where-data-is-originating-from-wrong-hostname/m-p/555442#M91998 <P>Hello,</P><P>please vote this idea :&nbsp;<A href="https://ideas.splunk.com/ideas/EID-I-1034" target="_blank">https://ideas.splunk.com/ideas/EID-I-1034</A></P><P><SPAN>Apart from using a 'host' field to store information about host where the issue originates from, it would be good to introduce a special field (eg. similar to _indextime) which would store the forwarder's IP or hostname visible from the network's point of view.</SPAN></P><P>Thanks.</P> Fri, 11 Jun 2021 07:00:01 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-find-where-data-is-originating-from-wrong-hostname/m-p/555442#M91998 splunkreal 2021-06-11T07:00:01Z