topic Search for host name where hostname is not an IP in Splunk Search https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181965#M52446 <P>When I use the <CODE>| metadata type=hosts</CODE> I see all my servers as well as network equipment that have <CODE>host</CODE> as the IP of the device.</P> <P>I would like to do the search and leave out all the IPs under <CODE>host</CODE> and only get the ones that have alphanumeric hostnames</P> Tue, 13 Jan 2015 00:04:12 GMT hartfoml 2015-01-13T00:04:12Z Search for host name where hostname is not an IP https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181965#M52446 <P>When I use the <CODE>| metadata type=hosts</CODE> I see all my servers as well as network equipment that have <CODE>host</CODE> as the IP of the device.</P> <P>I would like to do the search and leave out all the IPs under <CODE>host</CODE> and only get the ones that have alphanumeric hostnames</P> Tue, 13 Jan 2015 00:04:12 GMT https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181965#M52446 hartfoml 2015-01-13T00:04:12Z Re: Search for host name where hostname is not an IP https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181966#M52447 <PRE><CODE>| metadata type=hosts | regex host!="^(?:\d{1,3}\.){3}\d{1,3}" </CODE></PRE> <P>Use <CODE>regex</CODE> to find all <CODE>host</CODE> that doesn't follow the IPv4 address like <CODE>223.34.2.99</CODE>.</P> <P>More info about <CODE>regex</CODE>: <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/regex">http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/regex</A></P> Tue, 13 Jan 2015 00:24:26 GMT https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181966#M52447 skawasaki_splun 2015-01-13T00:24:26Z Re: Search for host name where hostname is not an IP https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181967#M52448 <P>Thanks Much @skawasaki_splunk I gave you 5 points but this was too easy for you. Thanks again for the help.</P> Tue, 13 Jan 2015 00:45:52 GMT https://community.splunk.com/t5/Splunk-Search/Search-for-host-name-where-hostname-is-not-an-IP/m-p/181967#M52448 hartfoml 2015-01-13T00:45:52Z