Splunk finds the desired pattern in the logs eg. "error xyz" and triggers a script to forward this condition into our enterprise monitoring system. All good stuff.
How can I determine the hostname of the offending server so I can include this little detail into our enterprise system via the triggered script?
Sorry if this is a total noob question, but I can't find a clear answer.
We are running Splunk 6.2.3 Enterprise.
↧