topic Re: change host name in nmon_data in Getting Data In

change host name in nmon_data

khmohammadzadeh — Tue, 29 Sep 2020 20:27:27 GMT

Hello
I want to change host name in TA-nmon and I have set the value of override_sys_hostname in /dbdata1/splunkforwarder/etc/apps/TA-nmon/default/nmon.conf to 1 and I have defined host value in $SPLUNK_HOME/etc/system/local/inputs.conf, but host name does not change for nmon_data and it only chenges for nmon_collect sourcetype, I have searched a lot but I couldn't find anything, can any one help me?
I have used last version of TA-nmon from https://splunkbase.splunk.com/app/3248/.
Thanks

Re: change host name in nmon_data

somesoni2 — Mon, 16 Jul 2018 18:17:13 GMT

For sourcetype nmon_data, the host names is overridden based on host name coming in the raw data (look at transforms.conf in /dbdata1/splunkforwarder/etc/apps/TA-nmon/default/transforms.conf), thus your override setting and not taking place there.

Also, when you want to make a change to app's config, do in local directory (TA-nmon/local, by creating the directory and creating a copy of that config file. That way your changes will remain intact, even after upgrade.

Re: change host name in nmon_data

khmohammadzadeh — Tue, 17 Jul 2018 12:22:19 GMT

So isn't it possible to change host name for nmon_data?
Thanks

Re: change host name in nmon_data

rvany — Tue, 17 Jul 2018 12:37:48 GMT

Your have an All-In-One configuration AND the data source on the same system?

Re: change host name in nmon_data

gjanders — Tue, 17 Jul 2018 23:39:20 GMT

Might be worth tagging your post as relevant to Nmon or the newer Metricator so the app owner can respond