I am trying to develop a standardized version of server.conf to deploy to all my forwarders.
In a Windows environment I am using the following:
serverName = $HOSTNAME
I tried using %COMPUTERNAME% but Splunk displayed an error when using %s. Fortunatly there was no errors when using a *nix variable. Where can I verify that the value for serverName is being interpreted correctly?
You are on the right track with $, just use $ with the Windows environment variable.
[general]
serverName=$COMPUTERNAME