How to change hostname in metadata

[lcshared]

Hello,

The current issue we have is, that we have changed the host names from lowercase to uppercase. Now we see in metadata both host names. How can this be changed?

Thanks

[MuS · Accepted solution]

Hi lcshared,

the old lowercase host names cannot be changed in metadata but they will disappear from metadata as soon as the actual events are rolled into frozen. Meanwhile you can use this search to get all host names in upper case:

 | metadata type=hosts | eval host=upper(host) 

hope this helps ...

cheers, MuS