I am trying to figure out where Splunk is getting it's data to populate the "Host Name" column in the Splunk GUI for the Forwarder Management section, when selecting the Clients tab.
I would like the host name to be FQDN (server1.x.xx)instead of it's current version (server1).
It doesn't seem to pull from any Splunk .conf files that I can see located on any Windows UF.
For reference, this only applies to Windows servers running Splunk UF agent.
I have already modified the inputs.conf (host = $decideOnStartup) and server.conf (hostnameOption = fullyqualifiedname) to no avail.
Any help will be greatly appreciated.
