https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/702354#M20570 <P>Hi , I am facing the same issue and found this thread. Was the issue resolved ? Can you let me know the fix please if this is working for you now.<BR />Thanks</P> Mon, 21 Oct 2024 07:16:05 GMT learnsplungeek 2024-10-21T07:16:05Z https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224888#M200 <P>My PC is duplicated a few times in forwarder management. How can I remove duplicate entries, so I don't get missing forwarder alerts?</P> Mon, 09 Jan 2017 22:44:18 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224888#M200 tmontney 2017-01-09T22:44:18Z https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224889#M201 <P>Hi tmontney, </P> <P>Are you running more than one forwarder on a machine so that the same hostnames show up as duplicate deployment clients?<BR /><BR /> If this is the case, you can set different servername and default-hostnames for your forwarders on the same machine to differentiate your forwarder clients. </P> <PRE><CODE>splunk set servername &lt;new_servername&gt; splunk set default-hostname &lt;new_hostname&gt; </CODE></PRE> <P>For example, if you have two universal forwarders sending data from the same host named my_host, you can set both the servername and default hostname of the first forwarder to my_host_uf01, and those of the second forwarder to my_host_02. </P> <P>Hope this helps. Thanks! <BR /> Hunter</P> Tue, 29 Sep 2020 12:20:53 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224889#M201 hunters_splunk 2020-09-29T12:20:53Z https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224890#M202 <P>Nope. I only have one UF for each client. Originally, I had installed it a few times before during testing. It seems like it's treating each install unique (based on its GUID).</P> Tue, 10 Jan 2017 17:55:55 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224890#M202 tmontney 2017-01-10T17:55:55Z https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224891#M203 <P>I think it is because the multiple installs were not completely uninstalled according to <A href="https://docs.splunk.com/Documentation/Forwarder/7.0.2/Forwarder/Uninstalltheuniversalforwarder">https://docs.splunk.com/Documentation/Forwarder/7.0.2/Forwarder/Uninstalltheuniversalforwarder</A></P> <P>Following the doc above and rebooting the machine should do the trick.</P> Tue, 06 Feb 2018 17:57:45 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/224891#M203 tzamer 2018-02-06T17:57:45Z https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/702354#M20570 <P>Hi , I am facing the same issue and found this thread. Was the issue resolved ? Can you let me know the fix please if this is working for you now.<BR />Thanks</P> Mon, 21 Oct 2024 07:16:05 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-are-there-duplicate-entries-of-my-PC-in-Forwarder-management/m-p/702354#M20570 learnsplungeek 2024-10-21T07:16:05Z