Based on Get hostname of the machine
In our case, the host name ends to be the plain host name such as host111, but there are cases in which the domain name is included, such as host111.domain_name.com.
How can we standardize on 'just' the host name, without the domain?
This is controlled (especially on windows forwarders) by settings inside server.conf
:
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf
In particular, you need this:
hostnameOption = shortname
This is controlled (especially on windows forwarders) by settings inside server.conf
:
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf
In particular, you need this:
hostnameOption = shortname
Sounds great woodcock. However, it seems to me the the server.conf
exists on the forwarder but not on the deployment app on the deployment server. It means that if we introduce 20 new forwarders, we need to go and adjust and bounce the server.conf
on 20 servers. Is it right? Is there anything easier to manage?
You can build this file into an app and deploy it from the DS.
That's great - thank you!!!