All Apps and Add-ons

Add-on builder set static host field

goran_epl
Explorer

Hello,
I am building an TA with Splunk add-on builder with scripted input.
I want to give a user the possibility to set static host field for each input.
I cannot add host field in data input parameters because I am getting an error:
"Internal name
The input parameter name 'host' is a reserved keyword"

How can I do that?

Hostname or IP is not in the event data, but I have an input parameter hostname which I could use.

0 Karma

chli_splunk
Splunk Employee
Splunk Employee

Please use "hostname" or "myhost" instead of "host" which is a Splunk reserved parameter. Also please make sure the internal name you created is unique in UI

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...