diff --git a/package/etc/conf.d/conflib/_splunk/fix_dns.conf b/package/etc/conf.d/conflib/_splunk/fix_dns.conf
index 5dd0a94..753da04 100644
--- a/package/etc/conf.d/conflib/_splunk/fix_dns.conf
+++ b/package/etc/conf.d/conflib/_splunk/fix_dns.conf
@@ -22,7 +22,8 @@ class FixHostResolver(object):
 
             resolved = socket.gethostbyaddr(ipaddr)
             hostname = resolved[0]
-            log_message['HOST'] = hostname
+            name, ext = hostname.split('.')[-2:]
+            log_message['HOST'] = name
         except:
             pass