Deployment Architecture

Change indexer server name

bohrasaurabh
Communicator

We are running Splunk on CentOs 6.x. We rack odd number servers in DC1 and even numbered servers in DC2. For some reason, 4 of our indexers have been racked in the incorrect DC. So instead of moving them from one DC to another I was wondering if I could just change their host names. I want to know doing this (change hostnames) will have any impact on Splunk. Are there any special considerations which I will have to make?

Note: The forwarders use IP address to send the data.

thanks,

Tags (2)
0 Karma

somesoni2
Revered Legend

You can add following stanza (if not already there) in $Splunk_Home$\etc\system\local to update the host name of the indexer (default to current server name).

[default]
host = <your new server Name>

e.g. 
[default]
host = MY_IDX_01
0 Karma

bbiandov
Path Finder

@bohrasaurabh did that work? I too want to update Splunk server name and under Index Settings the Default host name

Those were set originally since the actual OS hostname was different but when the server was moved over to another box it didn't just take the new OS hostname but it kept what was originally setup.

Would there be any negative consequences as a result of just changing those 2 things using the UI ?

Thank you
~B

alt text

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...