Hi all 🙂
I'm in trouble regarding set host in multiple logs files ...
Here's folders logs:
For example, an log1.log:
<166>2012-03-04T11:02:14.526Z MyHost Vpxa: [34229B90 verbose 'SoapAdapter.HTTPService' opID=SWI-3f235b28-23]
I'd like to catch "MyHost" in each log1.log to set host value.
Thanks for your help
could you please post your inputs.conf
Not work 😞
Host still appear with "192.168.0.1" 192.168.0.2" etc.
Have you tried to set the sourcetype to syslog, since that is what it seems to be. Splunk should then extract the hostname from each event by default, I think.