topic Re: How to make sure all servers checking in with the deployment server use FQDN? in Getting Data In

How to make sure all servers checking in with the deployment server use FQDN?

jlemoine — Thu, 19 Jan 2017 21:52:43 GMT

I've noticed that among all of the universal forwarders checking in with my deployment server, there is no consistency in which hosts are fully qualified domain names (FQDN), e.g. myserver.mydomain.com, and which hosts just check in with short names, e.g. myserver.

Can someone tell me how to control this function? Ideally, I want all servers checking in with the deployment server to use FQDNs.

Thanks in advance!

Re: How to make sure all servers checking in with the deployment server use FQDN?

woodcock — Fri, 20 Jan 2017 06:16:28 GMT

Edit server.conf:

hostnameOption = <ASCII string>
* The option used to specify the detail in the server name used to identify this Splunk instance.
* Can be one of "fullyqualifiedname" , "clustername", "shortname"
* Is applicable to Windows only
* Shall not be an empty string

Re: How to make sure all servers checking in with the deployment server use FQDN?

jlemoine — Fri, 20 Jan 2017 14:52:33 GMT

Thank you.

Interesting about the "only to applicable to Windows only" caveat.

Actually, now that I look at it, it is only the Windows hosts that are not qualified on the forwarder management page. All of the *nix hosts are.