Getting Data In
Highlighted

Forwarder's hostname

Path Finder

What is the best way to change the hostname's of the forwarders (Linux)? We have change our naming convention. I changed the entry in the server.conf (serverName = $HOSTNAME), stopped splunkd and then restarted on the forwarder. I checked the "Deployment Monitor" and the newly renamed machine did not show up. The old name was still in the list. I gave it 20 minutes, no change. The "Current Status" for the old name changed to "missing". I was able to search using the new name. Can someone help with step by step procedures?

Highlighted

Re: Forwarder's hostname

Communicator

Did you try changing the "host = hostname" field in the inputs.conf on the forwarder?

View solution in original post

Highlighted

Re: Forwarder's hostname

Path Finder

There is not a line in my inputs.conf for "host" on the forwarder. It only list the directories to be monitored.

0 Karma
Highlighted

Re: Forwarder's hostname

Communicator