Feature Requests

tag new data by source (hostname) instead of via VIP

Some Content packs needs an own VIP to tag incomming data so the dashboards of that content pack can filter it.

For instance the NetApp content packs relies on it. This would mean that when you use a broad spectrum of content packs, you need extra VIP's just to tag data special for those content packs.


What if you could tag syslog data based on the source. (IP address or hostname).... or by dataset....

This would bring back the amount of IP addresses needed for some deployments. (especially when you run a LI-cluster


I would love to hear you thoughts for this idea


Idea No. 489