Splunk Search

Convert IP address into hostname

sympatiko
Communicator

Hi,

Is there a way on search query to resolve any IP result into hostname?

Thanks

Tags (2)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

No app needed, Splunk comes with a DNS lookup out of the box:

some search returning a field called ip | lookup dnslookup clientip as ip OUTPUT clienthost as your_shiny_host_field

woodcock
Esteemed Legend

You need the dnslookup app:

https://splunkbase.splunk.com/app/1535/

0 Karma

sympatiko
Communicator

Hi Im getting an "Unknown search command 'dnslookup'

0 Karma

woodcock
Esteemed Legend

Did you install the app on your Search Head? That is all I did and it worked great. It isn't my app so I would read through the app documentation and make sure that you have all prerequisites and see if there are any notes that will help you.

0 Karma
Get Updates on the Splunk Community!

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...

Splunk AppDynamics Agents Webinar Series

Mark your calendars! On June 24th at 12PM PST, we’re going live with the second session of our Splunk ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2025 SplunkTrust is officially open! If you ...