Executing the "ping" workflow action on, say, the src_ip field neither populates the "host" field nor returns any result. "nslookup", "traceroute", and "whois" workflow actions seem to work fine. Problem is seen with Splunk Enterprise 7.0.3 and 7.1.0.