https://community.splunk.com/t5/Splunk-Search/How-to-replace-hostnames-with-own-names/m-p/546589#M154956 <P>You need a way to map from one name to another - how do you know whether windows1 is Web1 or Web2? Is this mapping stored in a lookup somewhere, do you include it in a case statement in the search, can you get it through a join with another search?</P> Sat, 03 Apr 2021 07:18:18 GMT ITWhisperer 2021-04-03T07:18:18Z https://community.splunk.com/t5/Splunk-Search/How-to-replace-hostnames-with-own-names/m-p/546582#M154952 <P>When i use below query i can see multiple servers in the index.</P><P>Index=abc&nbsp; sourcetype=vmstat (host=windows1* OR&nbsp; host=windows2* OR host=windows3*) | eval cpu_percent_util=(100-pctIdle) | timechart span=1m avg(cpu_percent_util) by host</P><P>i can see graph by windows1, windows2, windows 3 but i want to see the host names like Web1, Web2, Web 3</P><P>Please help me on this.</P> Sat, 03 Apr 2021 00:07:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-replace-hostnames-with-own-names/m-p/546582#M154952 svalivarthey 2021-04-03T00:07:55Z https://community.splunk.com/t5/Splunk-Search/How-to-replace-hostnames-with-own-names/m-p/546589#M154956 <P>You need a way to map from one name to another - how do you know whether windows1 is Web1 or Web2? Is this mapping stored in a lookup somewhere, do you include it in a case statement in the search, can you get it through a join with another search?</P> Sat, 03 Apr 2021 07:18:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-replace-hostnames-with-own-names/m-p/546589#M154956 ITWhisperer 2021-04-03T07:18:18Z