Hi vasanthmss, 
 Thanks for the response. 
 Unfortunately, this did not resolve the issue.  I see that both the inputs.conf and server.conf were updated to mlp-da02 by following your CLI commands -- I restarted both the forwarder as well as our central server, to no avail -- it is still reporting as xmlspap2x. 
 server.conf:  
[sslConfig]  
sslKeysfilePassword = X 
 [general]  
pass4SymmKey = X  
serverName = mlp-da02 
 [lmpool:auto_generated_pool_forwarder]  
description = auto_generated_pool_forwarder  
quota = MAX  
slaves = *  
stack_id = forwarder 
 [lmpool:auto_generated_pool_free]  
description = auto_generated_pool_free  
quota = MAX  
slaves = *  
stack_id = free 
 inputs.conf:  
[default]  
host = mlp-da02 
 splunkd.log:  
01-14-2016 10:43:59.734 -0800 INFO  ServerConfig - My server name is "mlp-da02".  
01-14-2016 10:43:59.734 -0800 INFO  ServerConfig - Found no site defined in server.conf  
01-14-2016 10:43:59.734 -0800 INFO  ServerConfig - Found no hostname options in server.conf. Will attempt to use default for now.  
01-14-2016 10:43:59.734 -0800 INFO  ServerConfig - Host name option is "".  
01-14-2016 10:43:59.734 -0800 INFO  ServerConfig - My hostname is "XMLSPAP2X".  
01-14-2016 10:43:59.749 -0800 INFO  ServerConfig - Setting HTTP server compression state=on  
01-14-2016 10:43:59.749 -0800 INFO  ServerConfig - Setting HTTP client compression state=0 (false)  
01-14-2016 10:43:59.749 -0800 INFO  ServerConfig - Default output queue for file-based input: parsingQueue. 
 Any other thoughts? 
 Thanks, 
 Jason 
						
					
					... View more