All Apps and Add-ons

Is it possible to dynamically set the host field for the scripted inputs in Splunk Add-on for ServiceNow?



I've sat up the Splunk Add-on for ServiceNow on a HF to gather inputs from ServiceNow using the default scripted inputs that comes with the add-on. When I search in the data on my indexer, the host field for the data is that of the HF, not the actual ServiceNow machines. I know I'm able to set a static host field in the inputs.conf file in the add-on on the HF, but I don't think this would be the best solution. Also, there are several ServiceNow machines, so the static field would have to have a more general value in this case. I can't find any solutions for setting a dynamic host field in the docs. Could anyone help me out?

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!