topic Re: Splunk Add-on for Microsoft Azure: Is there a way to rename the host name? in All Apps and Add-ons

Splunk Add-on for Microsoft Azure: Is there a way to rename the host name?

jackgordon — Tue, 18 Oct 2016 19:45:37 GMT

When polling the server the host is reported as "localhost". Is there anyway to rename this? Perhaps with a lookup or some other method?

Re: Splunk Add-on for Microsoft Azure: Is there a way to rename the host name?

adamsaul — Tue, 18 Oct 2016 19:50:22 GMT

::$SPLUNKHOME/etc/system/local/inputs.conf
[default]
host = <hostname>

::$SPLUNKHOME/etc/system/local/server.conf
[general]
serverName = <hostname>
pass4SymmKey = $1$foobar

Check the above files and make sure they have the hostname you would like. If you are running on a NIX platform, also check the /etc/hostname file.

Re: Splunk Add-on for Microsoft Azure: Is there a way to rename the host name?

jackgordon — Tue, 18 Oct 2016 19:58:19 GMT

This is in reference to the remote Azure server itself, rather than the Splunk server.

Re: Splunk Add-on for Microsoft Azure: Is there a way to rename the host name?

adamsaul — Tue, 18 Oct 2016 20:03:01 GMT

Jack,

Sorry for the misunderstanding.

When you say remote Azure server, you mean the instance in which you have deployed the Azure Add-On?
If you are talking about the Add-On, then the files I mentioned above are configuration files you would find on the Splunk Universal Forwarder