Is there a token containing the hostname of the instance where Splunk Web runs?
when calling
| rest splunk_server=local /
one can use the field splunk_server (dedup first)
when calling
| rest splunk_server=local /
one can use the field splunk_server (dedup first)
Unfortunately it is NOT as per the document. (You could write a scripted input and get it using python if you need though)
Available Environment Tokens: as per http://docs.splunk.com/Documentation/Splunk/latest/Viz/tokens
$env:user$
Current user's user name
$env:user_realname$
Current user full name.
$env:user_email$
Current user email address.
$env:app$
Current app context
$env:locale$
Current locale
$env:page$
Currently open page
$env:product$
Current instance product type
$env:instance_type$
Indicates whether the current instance is Splunk Cloud or an on-premises deployment
$env:is_cloud$
Indicates if the current instance is Splunk Cloud. This token is only set when "true".
$env:is_enterprise$
Indicates if the current instance is a Splunk Enterprise deployment. This token is only set when "true".
$env:is_hunk$
Indicates if the current instance is a Hunk deployment. This token is only set when "true".
$env:is_lite$
Indicates if the current instance is a Splunk Light deployment. This token is only set when "true".
$env:is_lite_free$
Indicates if the current instance is using a Splunk Light free license. This token is only set when "true".
$env:is_free$
Indicates if the current instance is using a Splunk Enterprise free license. This token is only set when "true".
$env:version$
Current instance product version