Setting host value from DB Connect SQL statement results

[joesrepsolc]

While creating a new DB Input in DB Connect 3.4.0, i need to set the host value per event as it is indexed. Its a SQL statement with a column named "DeviceName", and I want the host=[DeviceName value] for each event.

So far I can only hard set the host value in the input, but not based on the data. 

Help anyone? Thanks!

Joe

[isoutamo]

Hi
Based on docs, you could try the next.
As DBX currently use HEC and it supports remote HEC server you can do that as other props+transforms field pickup and change on your general HEC configurations.

https://docs.splunk.com/Documentation/DBX/3.4.0/DeployDBX/ConfigureDBConnectsettings
And there chapter “ Configure remote HTTP Event Collector (HEC)”

Probably this works also on the same node where DBXis running.
r. Ismo