I have encounter issues where i need to correlate events from 2 data sources but my hostname is not the same. e.g. hostname.gov.sg and hostname.
How can i go about correlating events from 2 different data sources. Can i use variables to extract out the hostname from the FQDN.