Why too many host appear in Splunk Web and how to delete them

[lohit]

Hi

I have installed a universal forwarder on a linux machine which is monitoring logs of /var/log.In splunk web under Hosts section, there is a Huge list of hosts coming along with UF also.. Should not it be only UF name.? and how to delete hosts as well as source and source types. I am using 5.0.3. Is the delete command sufficient.

[linu1988]

Hello,
You can't delete the host names until and unless you clean the index/re-create them.

I suppose the logs were collected for some web event which gave you all the other host names. If you can define the default HOST stanza in inputs.conf then it will give you the single host name.
Even you can define them separately per source basis.

Kindly refer the below path:
_http://docs.splunk.com/Documentation/Splunk/5.0/Data/overridedefaulthostassignments