Host name is not updating in the web app

[deegupta]

I had splunk forwarder setup at the server machines and the logs are being forwarded to splunk server fine. I can also view all the logs in the web app.

However, since my server setup has two kinds of servers, i renamed one of the server component's host name. To do this, i edited inputs.conf file and changed the Host value to the desired string. After doing this I restarted the splunk service.

But the newly added Host is not appearing in the web app. Is there something else to be done here? Please help.

[deegupta]

Found the issue here. I had multiple instances of the same host type and missed updating the inputs.conf for one instance. The logs were coming in splunk but host name was not updating.

After updating the inputs.conf for all the instances, everything is working fine now.

Thanks every one.

[kml_uvce]

If you have added Host name in inputs.conf from forwarder side and restarted , ideally host name should come in Web app, please check any errors or new logs are coming into splunk web app.

[HiroshiSatoh]

Did you check the log? I think error and are on the log settings if wrong.