Splunk 9.4.0 - hostname, issues with license manager reports after hostname change

[Space_Crawler]

Hi,

I have recently changed the OS hostname, followed by Splunk hostname change on a single node deployment. 

I am still seeing old hostname in splunk License Manager reports, which are also showing blanks for both today and historical license consumption. 

Followed several articles on things to check, ie https://splunk.my.site.com/customer/s/article/In-the, and https://community.splunk.com/t5/Splunk-Dev/How-to-fix-incorrect-Instance-name-after-change-hostname/...

Same outcome - the license manager still showing incorrect hostname in dropdown, and license usage stats are not reflected in the UX

If someone could please provide additional guidance on things I can check?

[livehybrid]

Hi 

The license dashboard often uses the RolloverSummary data, which is generated at midnight (usually). If its been less than 24 hours then this could be why you are seeing no data. Also, the search uses a macro `set_local_host` which basically uses the rest endpoint in the SPL below to get the current hostname, this means it may not show the data for the previous 60 days because it will have been saved under the old hostname.

When you run the following, do you get your old server name, or new one?

|rest splunk_server=local /services/server/info | table host

Does this match a host you see in the below?

index=_internal source=*license_usage.log*

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

[Space_Crawler]

Hey Will, 

the hostname has been changed for over 7 days now. 

|rest splunk_server=local /services/server/info | table host

returns the correct (updated) hostname, and it does match the hostname of the search query

index=_internal source=*license_usage.log*

License Manager report, the drop down in the top-left corner is still somehow uses the old (amazon assigned) hostname that is not reflecting the name change.