topic Host name is not updating in the web app in Getting Data In

Host name is not updating in the web app

deegupta — Mon, 05 Aug 2013 12:51:29 GMT

I had splunk forwarder setup at the server machines and the logs are being forwarded to splunk server fine. I can also view all the logs in the web app.

However, since my server setup has two kinds of servers, i renamed one of the server component's host name. To do this, i edited inputs.conf file and changed the Host value to the desired string. After doing this I restarted the splunk service.

But the newly added Host is not appearing in the web app. Is there something else to be done here? Please help.

Re: Host name is not updating in the web app

HiroshiSatoh — Mon, 05 Aug 2013 14:37:44 GMT

Did you check the log? I think error and are on the log settings if wrong.

Re: Host name is not updating in the web app

kml_uvce — Tue, 06 Aug 2013 06:05:19 GMT

If you have added Host name in inputs.conf from forwarder side and restarted , ideally host name should come in Web app, please check any errors or new logs are coming into splunk web app.

Re: Host name is not updating in the web app

deegupta — Tue, 06 Aug 2013 10:10:42 GMT

Found the issue here. I had multiple instances of the same host type and missed updating the inputs.conf for one instance. The logs were coming in splunk but host name was not updating.

After updating the inputs.conf for all the instances, everything is working fine now.

Thanks every one.