I need to create 2 dashboard panels showing the first and last time of the events being displayed. Has anyone done this? Could you share your simple XML code? I'm trying to do this in Splunk 6. ... View more

I have a real need to insert a hostname into an event at collection\index time not at search time. Seeing that most of the IP's that I'm looking to resolve to hostnames change very frequently I need to capture the hostname and include it in the event when it is indexed. Does anyone know a way to do that? I looked at these articles but they don't seem to be helpful to do it at index time. So basically a quick reverse DNS lookup and insert it into the event as a "hostname" field would be perfect. This will allow me to follow specific hosts and have information on every IP that host had. http://splunk-base.splunk.com/answers/1884/lookups-using-them-to-replace-the-host-field http://splunk-base.splunk.com/answers/27840/ip-address-vs-hostname http://blogs.splunk.com/2009/12/15/reverse-dns-lookups-for-host-entries/ http://splunk-base.splunk.com/answers/61853/resolve-ip-address Thanks, -Ben ... View more

Does anyone know how to hash or tokenize a number when collecting the data. My number simply is a 12 digit number like (123456789012). Thanks in advance! -Ben ... View more