Getting Data In

Renamed serverclass, but not updated in data inputs?

splunkreal
Motivator

Hello,

upgraded to 9.0.4.1 from V8.2.2, in Forwarder management we renamed Server class but when going to Data inputs / Files & directories then the Server Class is not updated.

serverclass.conf is updated, problem is just in GUI even after restart / reload ...

Thanks for your help.

* If this helps, please upvote or accept solution if it solved *
Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

At least in my environment Forwarder management is still Forwarder management on On Premise version 9.0.4.1.

isoutamo_0-1685965766922.png

Or have I some misunderstanding what you are asking?

r. Ismo

0 Karma

splunkreal
Motivator

Hello @isoutamo this is regarding renaming serverclass and looking at "Data inputs" / "forwarded management", change not reflecting.

Thanks.

 

* If this helps, please upvote or accept solution if it solved *
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Ok. When I look those on 8.2.7.1 I have only N/A on Server Class field for forwarders Files & Directories list. On 9.0.4.1 there is a correct Server Class name. So probably this was a bug on some splunk versions.

8.2.7.1 

isoutamo_0-1685967981341.png

9.0.4.1

isoutamo_1-1685968008146.png

Was this what you are asking?

r. Ismo

0 Karma

splunkreal
Motivator

Yes, N/A is not correct if this is correctly setup in Forwarder management IMO.

* If this helps, please upvote or accept solution if it solved *
0 Karma

isoutamo
SplunkTrust
SplunkTrust
Then you should create a support/bug ticket to Splunk Support.
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...