Will it break anything? Will it violate any certificates? I guess index=_internal will probably show a new machine for the new data after the IP address is changed.
If you configured all the connections by hostname , there shouldn't be a problem. Even your internals won't change, your machine name is set @ first-run of splunk.
View solution in original post
