topic Indexing Performance Drop-down Indexer (ServerName) is Wrong in Splunk Enterprise

Indexing Performance Drop-down Indexer (ServerName) is Wrong

gearmstrong — Mon, 14 Dec 2020 15:34:40 GMT

Good day folks,

After migrating and upgrading from 2016 DataCenter 'All-in-one' 8.0.0 to 2019 DataCenter Core 'All-in-one' 8.1.0.1 Build:24fd52428b5a I have noticed a few things don't seem to be populating with the new server name.

For example the Monitoring Console-> Indexing-> Indexing Performance: instance "Instance" Drop-down input box has the Old Server Name (only) and does not thereby produce any metrics for the new server. I have verified and validated new name in Server.conf. I have checked metrics.log and data is flowing.

i don't see anywhere I can edit this 'Report/Form' to obtain drop-down data. Where else can I see where this drop-down is being populated from?

Thank you,

Greg

Re: Indexing Performance Drop-down Indexer (ServerName) is Wrong

nickhills — Mon, 14 Dec 2020 15:42:44 GMT

Take a look in $SPLUNK_HOME/etc/system/local/inputs.conf

On initial install this file also gets the original hostname written into it.

Re: Indexing Performance Drop-down Indexer (ServerName) is Wrong

gearmstrong — Mon, 14 Dec 2020 15:48:41 GMT

Thank you Nick,

Yes, that is one of the files that I had verified that also had correct Server Name in it in format below:

[default]
host = NewServerName.fqdn

Re: Indexing Performance Drop-down Indexer (ServerName) is Wrong

gearmstrong — Mon, 14 Dec 2020 16:01:02 GMT

I just found the answer! Apparently if you upgrade in the fashion that I did, you will need to go into General Setup for Monitoring Console (Monitoring Console-> Settings-> General Setup)... review and ensure settings do indeed reflect your current (new) Server Name and then click "Apply Changes" Button to reset config to new server.