From b9eea97cda788c93fe211b5b98f045c807c86ef9 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Thu, 25 Jun 2020 13:07:14 -0400
Subject: [PATCH] Correct posible type casting issue (#546)

* Update fix_dns.conf

* Update fix_dns.conf
---
 package/etc/conf.d/conflib/_splunk/fix_dns.conf | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/package/etc/conf.d/conflib/_splunk/fix_dns.conf b/package/etc/conf.d/conflib/_splunk/fix_dns.conf
index 753da04..c956c33 100644
--- a/package/etc/conf.d/conflib/_splunk/fix_dns.conf
+++ b/package/etc/conf.d/conflib/_splunk/fix_dns.conf
@@ -20,9 +20,8 @@ class FixHostResolver(object):
         try:
             ipaddr = log_message['HOST'].decode('utf-8')    
 
-            resolved = socket.gethostbyaddr(ipaddr)
-            hostname = resolved[0]
-            name, ext = hostname.split('.')[-2:]
+            hostname, aliaslist, ipaddrlist = socket.gethostbyaddr(ipaddr)
+            name = str(hostname).split('.')[0]
             log_message['HOST'] = name
         except:
             pass