I have different devices sending data via syslog.
Current Stanza Example:
[udp//IP:PORT]
host = hostname
sourcetype = syslog
However, events still show up as host = ip address. Is there another place to do this?
I have different devices sending data via syslog.
Current Stanza Example:
[udp//IP:PORT]
host = hostname
sourcetype = syslog
However, events still show up as host = ip address. Is there another place to do this?