Hostname Change

[awilkoski]

I am using splunk as our syslog server. I am new to splunk and everything about it. Currently the data coming in is from various routers and switches. The hostnames are that of the IP address of the devices. Is there a way to change the hostname by the name found in the source log?

[awilkoski]

I see I have two inputs.conf files. Which one am I supposed to be modifing? Also should that be added under the UDP section? If so then I am not seeing UDP in either file.

[mikelanghorst]

add the following to your inputs.conf stanza:

connection_host = dns