Splunk Search

what happens with Duplicate GUID's

Path Finder


I want know what happens if hosts have duplicate GUID's because i my environment , i have 100 forwarders having the same GUID.

Splunk Employee
Splunk Employee

I can't comment on real impact, but I can provide you suggestion to fix it.

The GUID is stored in $SPLUNK_HOME/etc/instance.cfg, and if you remove this file and restart a new GUID will be created

0 Karma