|
What is the best way to change the hostname's of the forwarders (Linux)? We have change our naming convention. I changed the entry in the server.conf (serverName = $HOSTNAME), stopped splunkd and then restarted on the forwarder. I checked the "Deployment Monitor" and the newly renamed machine did not show up. The old name was still in the list. I gave it 20 minutes, no change. The "Current Status" for the old name changed to "missing". I was able to search using the new name. Can someone help with step by step procedures? |
|
Did you try changing the "host = hostname" field in the inputs.conf on the forwarder? There is not a line in my inputs.conf for "host" on the forwarder. It only list the directories to be monitored.
(14 May '12, 11:38)
khhenderson
You can add the field if needed.... http://docs.splunk.com/Documentation/Splunk/latest/Admin/Inputsconf
(14 May '12, 11:41)
briang67
|
