All Apps and Add-ons

Splunk Add-on for Microsoft Azure: Is there a way to rename the host name?

jackgordon
New Member

When polling the server the host is reported as "localhost". Is there anyway to rename this? Perhaps with a lookup or some other method?

0 Karma

adamsaul
Communicator
::$SPLUNKHOME/etc/system/local/inputs.conf
[default]
host = <hostname>

::$SPLUNKHOME/etc/system/local/server.conf
[general]
serverName = <hostname>
pass4SymmKey = $1$foobar

Check the above files and make sure they have the hostname you would like. If you are running on a NIX platform, also check the /etc/hostname file.

0 Karma

jackgordon
New Member

This is in reference to the remote Azure server itself, rather than the Splunk server.

0 Karma

adamsaul
Communicator

Jack,

Sorry for the misunderstanding.

When you say remote Azure server, you mean the instance in which you have deployed the Azure Add-On?
If you are talking about the Add-On, then the files I mentioned above are configuration files you would find on the Splunk Universal Forwarder

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...