Configuring Hostname Resolution

Hostname Resolution is configured for source IP addresses with missing hostnames while inserting the data in the database. This means that the reports show both the initiator IP address and the initiator hostname in the reports whenever applicable.

•	Enabled Reverse Hostname Resolution — Reverse Hostname Lookup is disabled by default, enable this option for GMS to lookup for missing hostnames.

NOTE: Enabling hostname lookup increases the time taken to process syslogs. All syslogs that need resolution are processed separately in parallel to normal syslog processing. This might slow down summarizer and increase memory and consume more CPU cycle. Also the memory and CPU are impacted further by changing the default configurations of Lookup thread count, Scan every, and Refresh Resolved Hostname Cache every.Any changes to the Hostname Resolution Configuration takes effect during the next summarizer run.

•	Lookup thread count — Signifies how many threads are processing the lookup in parallel. The larger the number, the faster the processing.

NOTE: Increasing this number also increases the load on the summarizer instance.

•	Trigger time — GMS dumps syslogs with missing hostnames to a particular folder. This time indicates how long it waits to scan the folder for new files.

•	Refresh Resolved Hostname Cache every — The hostname that is looked up for an IP address is cached. This time indicates how long the hostname is kept in the cache, after that it looks up the hostname again for that IP address.

•	Update — Click this button when you are finished configuring the settings.

•	Enable Public IP Host-name Resolution — Public IP hostname resolution is disabled by default, enable this option for GMS to lookup for missing public IP hostnames.

•	Time out value for resolution — Select the timeout period (in milliseconds) if the hostname is not resolved.