Right now we have a lot of devices reporting syslogs into splunk. I'd really like to be able to search them by hostname or IP address. Is there a way to get both the IP address and the DNS lookup of the device into Splunk for the same syslog message?
For instance if I have a device located at 172.16.57.1 and it's in DNS as YUM-CA-FW, then it would be nice to search for this device either way:
host_ip="172.16.57.1"
or
host_name="YUM-CA-FW"
Is this possible?
If it is, can I take it a step further and have both a host_realIP and host_natIP?
... View more