All Apps and Add-ons

SC4S - Reverse DNS Lookup

dauger
New Member

I have a few devices that I cannot set the reverse DNS lookup values and so the IP address is showing up within Splunk. I'm forwarding the logs via Splunk Connect for Syslog. I am attempting to set these hostnames within the /opt/sc4s/local/context/host.csv file. I found the example CSV file within the GIT repository:

169.254.0.2,HOST,foo.example

My updated version of this file isn't working as expected. I found GIT patches where the HOST was updated to SOURCEIP, however, I'm not certain how that change would impact the formatting of the host.csv file. I've tried a few different formats but nothing has worked. Any suggestions would be appreciated.

Labels (1)
0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!