Getting Data In

Hostname and IP address,Hostname and IP to be sent to Splunk

lukessi
Path Finder

Hello,

We are sending data to a 3rd party raw, they want the IP of the sending host not the hostname, does splunk have a meta option for this I can update in transform's or can I get the uni forwarder to pass that information on?

Any help would be great,I have a 3rd party we send data too, who want to have the IP address as well as the DNS name on the raw traffic. Is there a way of getting the uni forwards to send their IP as as there hostname when they send the events to splunk I can then use transforms to overwrite the hostname to a IP.

Cheers

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...