The host field in Splunk for metrics data provides a formatted hostname replacing dots with dashes. In an attempt to utilize the pe_console field from facts data against the host field in the metrics data I discovered the mismatch between the host fields.
Adding the pe_console field to metric events allowed me to properly sort the hosts by the pe_console they are connected to.
The host field in Splunk for metrics data provides a formatted hostname replacing dots with dashes. In an attempt to utilize the pe_console field from facts data against the host field in the metrics data I discovered the mismatch between the host fields.
Adding the pe_console field to metric events allowed me to properly sort the hosts by the pe_console they are connected to.