Is there no "Host Field value" setting in Splunk DB Connect 2?

[nysoitsmiket]

I use the Host Field in most of my searches. Splunk DB Connect 1 had a setting to add the Host Field value to events that are imported from Oracle. There seems to be no equivalent setting in Splunk DB Connect 2. Am I missing something? If there really is no equivalent setting, can I inject a Host Field using a Transform?

[jnussbaum_splun · Accepted solution]

Go to: Settings -> Data inputs -> Splunk DB Connect input Service -> New OR name of existing input -> More Settings (at the bottom) -> Host

[teekayx]

Awesome, thanks. They have hidden it like a treasure.

[nysoitsmiket]

Ahh, now that I see it, it makes perfect sense. Thank you.

[jnussbaum_splun]

No problem, please accept if this answers your question. Thanks!

[nysoitsmiket]

Where do I find that series of links? Or is it a document reference? I see nothing that resembles that.

My current environment:

Splunk Version ............................................6.1.5
Splunk Build ............................................239630
Current App ............................................Splunk DB Connect v2
App Version ............................................2.0.4
App Build ............................................270621

[jnussbaum_splun]

Go to: Settings -> Data inputs -> Splunk DB Connect input Service -> New OR name of existing input -> More Settings (at the bottom) -> Host