Getting Data In

Assets,csv nt_host

daniel333
Builder

All,

Building my Assets.csv file for ES. Just curious about the nt_host field. Is this required? For example with my Linux hosts so I need to go ahead and still fill it out with the Linux server name? Harmful to do so? Harmful to not?

0 Karma

jpeoples
Engager

...a million years later....

Here Splunk says that one of the fields ( ip | mac | nt_host | dns) is required. So I believe as long as you have ONE of the other fields nt_hosts isn't required. With that being said I have the same question. It sounds like this will function but would it hurt to put the Linux server's hostnames there for reference?

http://docs.splunk.com/Documentation/ES/4.7.0/Admin/Formatassetoridentitylist#Asset_lookup_header

0 Karma

timm747747
Path Finder

We have ours populated with nix hosts. Not harmful at all.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...