I have a few devices that I cannot set the reverse DNS lookup values and so the IP address is showing up within Splunk. I'm forwarding the logs via Splunk Connect for Syslog. I am attempting to set these hostnames within the /opt/sc4s/local/context/host.csv file. I found the example CSV file within the GIT repository:
169.254.0.2,HOST,foo.example
My updated version of this file isn't working as expected. I found GIT patches where the HOST was updated to SOURCEIP, however, I'm not certain how that change would impact the formatting of the host.csv file. I've tried a few different formats but nothing has worked. Any suggestions would be appreciated.
