Deployment Architecture

Change indexer server name

bohrasaurabh
Communicator

We are running Splunk on CentOs 6.x. We rack odd number servers in DC1 and even numbered servers in DC2. For some reason, 4 of our indexers have been racked in the incorrect DC. So instead of moving them from one DC to another I was wondering if I could just change their host names. I want to know doing this (change hostnames) will have any impact on Splunk. Are there any special considerations which I will have to make?

Note: The forwarders use IP address to send the data.

thanks,

Tags (2)
0 Karma

somesoni2
Revered Legend

You can add following stanza (if not already there) in $Splunk_Home$\etc\system\local to update the host name of the indexer (default to current server name).

[default]
host = <your new server Name>

e.g. 
[default]
host = MY_IDX_01
0 Karma

bbiandov
Path Finder

@bohrasaurabh did that work? I too want to update Splunk server name and under Index Settings the Default host name

Those were set originally since the actual OS hostname was different but when the server was moved over to another box it didn't just take the new OS hostname but it kept what was originally setup.

Would there be any negative consequences as a result of just changing those 2 things using the UI ?

Thank you
~B

alt text

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...