Installation

How to use server.conf delivered to a series of UFs with mix of FQDM and short hostnames Linux 8.2.9?

taldavita
Explorer

Good day All!

UF version 8.2.9 on a series of Linux machines.

I've an application containing local/server.conf deploying to a series of Linux machines.

The machines have a mixed configuration of short and fqdn as the hostname. For consistence, want to use the short name.

Each instance environment contains a variable called HOST_EXTERNAL which is the short name.

The documentation states:

* Can contain environment variables.
* After any environment variables are expanded, the server name
  (if not an IPv6 address) can only contain letters, numbers, underscores,
  dots, and dashes. The server name must start with a letter, number, or an
  underscore.

ERROR: serverName must start with a letter, number, or underscore. You have: $HOST_EXTERNAL

ServerName is only set in the apps/app-name/local and system/default/server.conf. 

system/default/server.conf:serverName=$HOSTNAME

app-name/local/server.conf:serverName = $HOST_EXTERNAL

Googling, doesn't produce any examples of using an environment variable other than $HOSTNAME.

What am I missing on attempting to use $HOST_EXTERNAL as serverName in server.conf

Thoughts?

Labels (3)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @taldavita,

Splunk does not resolve system variables on server.conf other than $HOSTNAME. That is why you should think of a script to get $HOST_EXTERNAL value and update server.conf.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok
SplunkTrust
SplunkTrust

Hi @taldavita,

Splunk does not resolve system variables on server.conf other than $HOSTNAME. That is why you should think of a script to get $HOST_EXTERNAL value and update server.conf.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...