i'm using a NIFI flow to send in 3 values (host, message, moreData). I want to use host passed in from nifi as a JSON object and that works just fine but the records w/in Splunk show to values for "host".
It shows 127.0.0.1 and the actual value i want, lets say validHostName1.
If i exclude host 127.0.0.1 it removes the "validHostName1" values also as it's duel named.
I could rename the value i want to hostname thus negating the double value single var issue but I'm curious if there's a way to invert that and rename "host" which results in 127.0.0.1 to.. something else? Thus resulting in : host=validHostname1 and oldDefaultHost=127.0.0.1
