Running Batch Script for NetBios name resolution?

[NateStreet]

We currently have several logs that only capture the IP address of the asset performing the activity. A simple "nbtstat -a " will return the name of the asset within the windows command prompt. Is there a way we can automate this name resolution through automatically running a batch (.bat) file when it returns the first ten results (e.g. top 10)? Since the host names will depend on the current IP Address assignment it seems that this will need to be done as close to real time as possible.

Any suggestions or workarounds? Thank you!

[ahall_splunk]

If you are using Windows DHCP then you can monitor that and as it gives out assignments, log that. You can read about the log file here: http://technet.microsoft.com/en-us/library/dd759178.aspx

Once you have the data, create a temporal lookup of _time,src_ip,src_host and use that. Read about temporal lookups here: http://docs.splunk.com/Documentation/Splunk/6.2.0/Knowledge/Addfieldsfromexternaldatasources#Set_up_...