All Apps and Add-ons

Splunk Stream: Wrong Hostname $decideOnStartup

sebastianstruwe
Explorer

Hi Splunkers,

 

I'm using splunk 8.2.1 with splunk stream 7.3 . I'm using the deployment server for the deployment of Splunk_TA_stream. 

I'm getting Data to Splunk but the "Host" is set to "$decideOnStartup". On the other hand Stream Forward ID is set to the correct hostname. 

I followed this Guide (https://docs.splunk.com/Documentation/StreamApp/7.3.0/DeployStreamApp/InstallSplunkAppforStreaminadi...) but Step 5 of "Use the deployment server to distribute the Splunk Add-on for Stream Forwarders" did not work for me, so I copied the content of Splunk_TA_stream manual to deployment-apps.

 

Any Ideas?

Bildschirmfoto 2021-08-03 um 13.16.47.png

 

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...