We now have a splunk server to receive different servers' log. We want to forward these log to another syslog server. However, we cannot identify the log belong to which server in the syslog server because the source IP is Splunk server's IP. Our problem is: If there is any method to add information to the forwarded log? For example, Adding the hostname to the forwarded log, so we can identify the log is from the server with this hostname.
↧