Getting Data In

After an upgrade to latest splunk version to the UF agents, we could see duplicate host name being populated in the Forwarder Management console?


Hi All, Recently we have upgraded all the UF agent to the latest version 6.6.1 and after the upgrade, we could see some of the agents nodes are displayed twice in the forwarder management console and not sure how to remove the duplicate host name. kindly let me know how to get this fixed.

thanks in advance.

0 Karma


After you upgrade splunk UF hostname or servername got changed.

Check below post for more insight,

0 Karma

Path Finder

do they appear with the same hostname/IP but different client name? You might have more then one splunkd instance running on those UF's.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!