Hostname Change

awilkoski · ‎03-26-2012

I am using splunk as our syslog server. I am new to splunk and everything about it. Currently the data coming in is from various routers and switches. The hostnames are that of the IP address of the devices. Is there a way to change the hostname by the name found in the source log?

awilkoski · ‎03-26-2012

I see I have two inputs.conf files. Which one am I supposed to be modifing? Also should that be added under the UDP section? If so then I am not seeing UDP in either file.

mikelanghorst · ‎03-26-2012

add the following to your inputs.conf stanza:

connection_host = dns

Hostname Change

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Join the Conversation

Hostname Change

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features