Getting Data In

Changing the default hostname of Splunk Universal Forwarder

izzie123
Path Finder

Hello All,

I had installed UF on a windows server in our environment which is reporting to our Deployment server, Recently the hostname on it got changed and it stopped reporting to DS.

I referred to this link and tried to run the below commands on CLI:

https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-default-hostname-in-Splunk/m-p/...

./splunk set servername foo.domain.com

./splunk set default-hostname foo.domain.com

However, it is not recognizing these commands on the windows CLI .

Error : "'./splunk' is not recognized as an internal or external command,
operable program or batch file."

Can you all kindly help understand what could be the issue? 

I had ran these commands after going to the path where splunk UF is installed and under /etc/system/local/ directory.

But I am still getting this error, I am not sure if I am missing any step, or is it the path error and why these commands are not working.

We do not want to touch the configuration files, we would like to do the changes through CLI itself.

Can someone please help me in understanding the steps needed to be followed.

Thanks a ton in advance.

Labels (3)
0 Karma
1 Solution

SanjayReddy
SplunkTrust
SplunkTrust

Hi @izzie123 

run following command 

cd C:\Program Files\Splunk\bin

splunk show servername

splunk set servername <servername>

splunk set default-hostname <servername>

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Understand that Splunk primarily is a  Linux product that also runs on Windows.  Most documentation you will see is written for Linux users.  Windows users need to translate "./splunk" to "splunk.exe".

---
If this reply helps you, Karma would be appreciated.
0 Karma

izzie123
Path Finder

@richgalloway  Thank you for your reply.

I tried running the command "splunk.exe show servername" to check but I am still getting the same error.

Can you help with the command that needs to be run?

Many thanks!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Documentation assumes you are in the directory where the command resides.  If you aren't then use the commands appropriate for your platform/shell to get to the correct file system location.

---
If this reply helps you, Karma would be appreciated.

SanjayReddy
SplunkTrust
SplunkTrust

Hi @izzie123 

run following command 

cd C:\Program Files\Splunk\bin

splunk show servername

splunk set servername <servername>

splunk set default-hostname <servername>

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated

Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...