I tried sending log messages from apigee to splunk (over TCP).where should I find the value for <Host> tag.can someone tell me the steps to figure out host @sarthak @ anil sagar
The host is determined by the endpoint at which your splunk service is listening.
I am not a splunk expert, so I Cannot tell you more. You need to consult the Splunk documentation for information on syslog . For example, this is the link for Syslog Enterprise : https://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports
There's a different link for Syslog Cloud, I guess.