All Apps and Add-ons

Add-on builder set static host field

goran_epl
Explorer

Hello,
I am building an TA with Splunk add-on builder with scripted input.
I want to give a user the possibility to set static host field for each input.
I cannot add host field in data input parameters because I am getting an error:
"Internal name
The input parameter name 'host' is a reserved keyword"

How can I do that?

Hostname or IP is not in the event data, but I have an input parameter hostname which I could use.

0 Karma

chli_splunk
Splunk Employee
Splunk Employee

Please use "hostname" or "myhost" instead of "host" which is a Splunk reserved parameter. Also please make sure the internal name you created is unique in UI

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...