https://community.splunk.com/t5/Getting-Data-In/how-do-I-change-a-host-when-seeing-multiple-hosts/m-p/12612#M971 <P>I see the same host in my Summary page in Search app with same event count.</P> <P>They are the same host but show up like: hostname123_xxx.domain.suffix hostname123.domain.suffix</P> <P>Can I make them both show as just hostname123 going forward?</P> Fri, 30 Apr 2010 10:49:55 GMT micropotato 2010-04-30T10:49:55Z https://community.splunk.com/t5/Getting-Data-In/how-do-I-change-a-host-when-seeing-multiple-hosts/m-p/12612#M971 <P>I see the same host in my Summary page in Search app with same event count.</P> <P>They are the same host but show up like: hostname123_xxx.domain.suffix hostname123.domain.suffix</P> <P>Can I make them both show as just hostname123 going forward?</P> Fri, 30 Apr 2010 10:49:55 GMT https://community.splunk.com/t5/Getting-Data-In/how-do-I-change-a-host-when-seeing-multiple-hosts/m-p/12612#M971 micropotato 2010-04-30T10:49:55Z https://community.splunk.com/t5/Getting-Data-In/how-do-I-change-a-host-when-seeing-multiple-hosts/m-p/12613#M972 <P>Here is a similar thread that discusses how host names are assigned: <A href="http://answers.splunk.com/questions/1308/syslog-ng-logs-show-as-hostlocalserver-rather-than-remote" rel="nofollow">http://answers.splunk.com/questions/1308/syslog-ng-logs-show-as-hostlocalserver-rather-than-remote</A></P> Fri, 30 Apr 2010 22:25:13 GMT https://community.splunk.com/t5/Getting-Data-In/how-do-I-change-a-host-when-seeing-multiple-hosts/m-p/12613#M972 bwooden 2010-04-30T22:25:13Z