My search results for log data return IP addresses of hosts which I need to be resolved to hostnames. I have a CSV hosted on a web server and I can get SumoLogic to look up each IP in the CSV from the external web server and return the hostname for inclusion in the results. I'd like to stop using the web server and instead have the data held directly in SumoLogic. Is this possible? None of the IP address and hostname data is held anywhere in my logs and I don't want to create a collector simply to look up the contents of a file to get the data into SumoLogic. Is there any way I can upload data like a CSV and use it?
Please sign in to leave a comment.