https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-fix-fschange-getting-host-decideOnStartup/m-p/641569#M9565 <P>Hi,</P> <P>I know that there is an article about fschange depreciated, but it's still exists in splunk 9.x.x.</P> <P>I was wondering if anyone has this issue where the host = $decideOnStartup when using fschange, and possible how to fix it. This only happened to fschange for me.&nbsp;</P> <P>Also, any insight on alternatives to fschange is appreciated it.</P> <P>[fschange:/root/somefile]<BR />disabled = false<BR />index = fs_change<BR />recurse = true<BR />pollPeriod = 30<BR />sourcetype = fs_change</P> <P>&nbsp;</P> <P>thank you.</P> Thu, 27 Apr 2023 13:33:12 GMT tm 2023-04-27T13:33:12Z https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-fix-fschange-getting-host-decideOnStartup/m-p/641569#M9565 <P>Hi,</P> <P>I know that there is an article about fschange depreciated, but it's still exists in splunk 9.x.x.</P> <P>I was wondering if anyone has this issue where the host = $decideOnStartup when using fschange, and possible how to fix it. This only happened to fschange for me.&nbsp;</P> <P>Also, any insight on alternatives to fschange is appreciated it.</P> <P>[fschange:/root/somefile]<BR />disabled = false<BR />index = fs_change<BR />recurse = true<BR />pollPeriod = 30<BR />sourcetype = fs_change</P> <P>&nbsp;</P> <P>thank you.</P> Thu, 27 Apr 2023 13:33:12 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-fix-fschange-getting-host-decideOnStartup/m-p/641569#M9565 tm 2023-04-27T13:33:12Z