topic Changing the default hostname of Splunk Universal Forwarder in Getting Data In

Changing the default hostname of Splunk Universal Forwarder

izzie123 — Fri, 14 Jul 2023 17:19:16 GMT

Hello All,

I had installed UF on a windows server in our environment which is reporting to our Deployment server, Recently the hostname on it got changed and it stopped reporting to DS.

I referred to this link and tried to run the below commands on CLI:

https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-default-hostname-in-Splunk/m-p/117398

./splunk set servername foo.domain.com

./splunk set default-hostname foo.domain.com

However, it is not recognizing these commands on the windows CLI .

Error : "'./splunk' is not recognized as an internal or external command,
operable program or batch file."

Can you all kindly help understand what could be the issue?

I had ran these commands after going to the path where splunk UF is installed and under /etc/system/local/ directory.

But I am still getting this error, I am not sure if I am missing any step, or is it the path error and why these commands are not working.

We do not want to touch the configuration files, we would like to do the changes through CLI itself.

Can someone please help me in understanding the steps needed to be followed.

Thanks a ton in advance.

Re: Changing the default hostname of Splunk Universal Forwarder

richgalloway — Fri, 14 Jul 2023 18:39:42 GMT

Understand that Splunk primarily is a Linux product that also runs on Windows. Most documentation you will see is written for Linux users. Windows users need to translate "./splunk" to "splunk.exe".

Re: Changing the default hostname of Splunk Universal Forwarder

izzie123 — Sat, 15 Jul 2023 04:25:01 GMT

@richgalloway Thank you for your reply.

I tried running the command "splunk.exe show servername" to check but I am still getting the same error.

Can you help with the command that needs to be run?

Many thanks!

Re: Changing the default hostname of Splunk Universal Forwarder

SanjayReddy — Sat, 15 Jul 2023 06:00:27 GMT

Hi @izzie123

run following command

cd C:\Program Files\Splunk\bin

splunk show servername

splunk set servername <servername>

splunk set default-hostname <servername>

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated

Re: Changing the default hostname of Splunk Universal Forwarder

richgalloway — Sat, 15 Jul 2023 20:56:12 GMT

Documentation assumes you are in the directory where the command resides. If you aren't then use the commands appropriate for your platform/shell to get to the correct file system location.