Thanks for the quick response, however neither method worked for changing the host name being displayed.
I went to C:\Program Files\Splunk\etc\system\local and altered inputs.conf by adding line:
host = NAME
and then stopped/started splunk, however the name was still being displayed the same.
So next I tried the props/transforms method. Went to C:\Program Files\Splunk\etc\system\default and altered the props.conf and transforms.conf by adding the sections mentioned in the article linked (Copy/Pasted them and just changed them to have my ip address and name I wanted). Then again stopped/started splunk and the name is still displaying the same. Not sure if I'm missing something here or what.
Thanks
... View more