Getting Data In

Hostname Change

awilkoski
Engager

I am using splunk as our syslog server. I am new to splunk and everything about it. Currently the data coming in is from various routers and switches. The hostnames are that of the IP address of the devices. Is there a way to change the hostname by the name found in the source log?

Tags (1)

awilkoski
Engager

I see I have two inputs.conf files. Which one am I supposed to be modifing? Also should that be added under the UDP section? If so then I am not seeing UDP in either file.

0 Karma

mikelanghorst
Motivator

add the following to your inputs.conf stanza:

connection_host = dns

0 Karma