Hi, We have a project to rename OSX systems due to a reorg. I created a simple shell script that will rename the system based on user input and using the scutil binary. I also need a way to update the computer name for Splunk. I've tried a couple of things and don't have a great solution. 1) Use the sed command to replace the existing name in the inputs.conf compname=$(scutil --get ComputerName) cat /opt/splunkforwarder/etc/system/local/inputs.conf | sed 's/^host = .*/host = '$compname'/g' > /opt/splunkforwarder/etc/system/local/inputs.conf.new mv /opt/splunkforwarder/etc/system/local/inputs.conf.new /opt/splunkforwarder/etc/system/local/inputs.conf 2) Stopping Splunk services, removing files, Starting Splunk (forcing auto generating of conf files) /opt/splunkforwarder/bin/./splunk stop rm -rf /opt/splunkforwarder/etc/system/local/server.conf rm -rf /opt/splunkforwarder/etc/system/local/inputs.conf touch /opt/splunkforwarder/ftr rm -rf /opt/splunkforwarder/etc/myinstall/splunkd.xml /opt/splunkforwarder/bin/./splunk start 3) Using $decideOnStartup for the inputs.conf Overwriting the inputs.conf file with one that says host = $decideOnStartup Every solution I have tried hasn't worked perfectly in all scenarios, and I think I'm over complicating it. At the moment, I'm looking at option #3 as a solution, my only worry is the server.conf has the old computer name. After reading the Splunk document on server.conf, it doesn't look like I can use $decideOnStartup Thanks, Jonathan ... View more