Splunk Enterprise

HTTP EVENT Collector - HttpAppender - how to add hostname

dsvasani
New Member

Dear All

 

I am new to Splunk, and we are using log4j2 configuration file with HttpAppender to send logs , but I am not able to add Host name.

 

This is what I use:

 

 

 

 

<Http name="Splunk-New" url="http://host:8088/services/collector/raw">
                        <Property name="Authorization" value="Splunk token"></Property>
                        <Property name="Host" value="${hostName}"></Property>
                        <PatternLayout pattern="%-5p %d [%t] [event: %X{correlationId}] %c: %m%n"></PatternLayout>
                </Http>

 

 

 

 

Labels (1)
0 Karma

rupkumar4sec
Path Finder

${hostName} variable used in below line should provide required value for Host. 

<Property name="Host" value="${hostName}"></Property>

 

Reference from Log4j documentation:
 "The default map is pre-populated with a value for "hostName" that is the current system's host name or IP address"

https://logging.apache.org/log4j/2.x/manual/configuration.html 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...