We can have either IP address or hostname for host field, both is not supported yet. Below highlighted config in inputs.conf will force to set host as IP address: host = localhost connection_host = ip we tried to explore _meta field coming from UF. If we can make that dynamic to support variable, then we can have both IP and hostname. This would be similar to $decideOnStartup functionality for host field, but more flexible. Has anyone able to send both IP and Hostname dynamically for indexing through UF? For example: $hostname$ will yield hostname.. as used with inputs.conf, it would be [default] _meta = splunk_forwarder::$hostname$ ... View more