Getting Data In

Hostname and IP address,Hostname and IP to be sent to Splunk

lukessi
Path Finder

Hello,

We are sending data to a 3rd party raw, they want the IP of the sending host not the hostname, does splunk have a meta option for this I can update in transform's or can I get the uni forwarder to pass that information on?

Any help would be great,I have a 3rd party we send data too, who want to have the IP address as well as the DNS name on the raw traffic. Is there a way of getting the uni forwards to send their IP as as there hostname when they send the events to splunk I can then use transforms to overwrite the hostname to a IP.

Cheers

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...