Getting Data In

After an upgrade to latest splunk version to the UF agents, we could see duplicate host name being populated in the Forwarder Management console?

Hemnaath
Motivator

Hi All, Recently we have upgraded all the UF agent to the latest version 6.6.1 and after the upgrade, we could see some of the agents nodes are displayed twice in the forwarder management console and not sure how to remove the duplicate host name. kindly let me know how to get this fixed.

thanks in advance.

0 Karma

sbbadri
Motivator

After you upgrade splunk UF hostname or servername got changed.

Check below post for more insight,

https://answers.splunk.com/answers/154999/how-can-i-change-the-default-hostname-in-splunk.html

0 Karma

coreyf311
Path Finder

do they appear with the same hostname/IP but different client name? You might have more then one splunkd instance running on those UF's.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...