Splunk Dev

UF to send both Hostname and IP Address as metadata. Currently either IP or hostname is supported as host field

SunilkumarG
Engager

We can have either IP address or hostname for host field, both is not supported yet. Below highlighted config in inputs.conf will force to set host as IP address:

host = localhost

connection_host = ip

we tried to explore _meta field coming from UF. If we can make that dynamic to support variable, then we can have both IP and hostname.

This would be similar to $decideOnStartup functionality for host field, but more flexible.

Has anyone able to send both IP and Hostname dynamically for indexing through UF?

For example:

$hostname$ will yield hostname.. as used with inputs.conf, it would be

[default]

_meta = splunk_forwarder::$hostname$

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...