getting host from file name?

[a212830]

Hi,

I have a bunch of files within a directory that I am monitoring. The host is not contained within the data, but rather is part of the file name. (hostname.cpuinfo.txt, hostname.proxyinfo.txt...)Is there anyway to tell splunk to programmatically pick up this information?

[sdaniels · Accepted solution]

You can set it for each file via regex in inputs.conf.

http://docs.splunk.com/Documentation/Splunk/latest/Data/setadefaulthostforaninput#Dynamically_set_th...

[a212830]

Thanks! That did it. I used the host_segment parameter.