Uncooked Data Containing hostname

lukessi · ‎09-21-2018

I am sending uncoooked data but the hostname the other end are seeing is the Heavy Forwarder.

Is there anyway of sending the correct hostname?

harsmarvania57 · ‎09-21-2018

How are you receiving data on Heavy Forwarder ? From UF ? If yes then have you set sendCookedData=false in outputs.conf on both UF and HF?

mstjohn_splunk · ‎09-21-2018

hi @lukessi,

Thanks for posting. As @harsmarvania57 mentioned above, could you give us some more context for your query? You have a much better chance of getting your question answered if you provide more information about your issue. Plus, it will help guide future community users who are facing a similar problem.

Uncooked Data Containing hostname

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation

Uncooked Data Containing hostname

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future