<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk_Server is showing different server than the one in outputs.conf in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Server-is-showing-different-server-than-the-one-in/m-p/447878#M77881</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;We currently in  the  process  of moving  to  indexer clustering with  3 new  servers.  The  3  old servers are standalone. After setting  up  the 3 new cluster peers and verify that the command ran  for this are correct, i decided to send data to them. In my  outputs.conf, i have only specified ONE peer from the new indexer cluster. However, when data is sent and indexed,  the search head shows the splunk_server field with a value of our old server There are no references to that server name in any of the conf files either.. My machine has never sent data to the old  servers so i am not sure whats going....&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/7508i60A9FDFEEFC9702F/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 15 Aug 2019 13:28:02 GMT</pubDate>
    <dc:creator>jordanking1992</dc:creator>
    <dc:date>2019-08-15T13:28:02Z</dc:date>
    <item>
      <title>Splunk_Server is showing different server than the one in outputs.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Server-is-showing-different-server-than-the-one-in/m-p/447878#M77881</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;We currently in  the  process  of moving  to  indexer clustering with  3 new  servers.  The  3  old servers are standalone. After setting  up  the 3 new cluster peers and verify that the command ran  for this are correct, i decided to send data to them. In my  outputs.conf, i have only specified ONE peer from the new indexer cluster. However, when data is sent and indexed,  the search head shows the splunk_server field with a value of our old server There are no references to that server name in any of the conf files either.. My machine has never sent data to the old  servers so i am not sure whats going....&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/7508i60A9FDFEEFC9702F/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 15 Aug 2019 13:28:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-Server-is-showing-different-server-than-the-one-in/m-p/447878#M77881</guid>
      <dc:creator>jordanking1992</dc:creator>
      <dc:date>2019-08-15T13:28:02Z</dc:date>
    </item>
  </channel>
</rss>

