Documentation > Splunk > Admin Manual > Set default host for a Splunk server

Admin Manual

 


Getting Started
How Splunk Works
Configuring a Splunk Deployment
Data Inputs
Hosts
Source Types
Timestamp Recognition
Events
Event Types
Meta Events
Fields
Segmentation
Saved Searches and Alerts
Authentication
Granular Access Control
Data Distribution
Distributed Search
Deployment Server
Index Management
Bundles
SplunkBase
Performance Tuning
Routine Maintenance
How-To
Troubleshooting
Reference

Set default host for a Splunk server

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Contents

Set default host for a Splunk server

The host value of an event is the hostname or IP address of the network host which originated the event. When Splunk is running on the server where the event occurred the assignment of host is straight forward. The default name is the host of the Splunk server.


via SplunkWeb

You can change the default host value via SplunkWeb. Click on the Admin button in the upper right hand corner. You can change the Default host value under the Datastore section:


30 admin11 definehost-host.jpg


via configuration files

This host assignment is written in inputs.conf during installation. You can modify the host entry by editing $SPLUNK_HOME/etc/bundles/local/inputs.conf.


This is the format of the host assignment in inputs.conf: 


host = <string>
  * This is a shortcut for MetaData:Host = <string>. It sets the host of
    events from this input to be the specified string. "host::" is 
    automatically prepended to the value when this shortcut is used.

Set your own host value by changing the entry for <string>.

Retrieved from "http://docs.splunk.com/Documentation/Splunk/3.1/Admin/SetDefaultHostForASplunkServer"

This documentation applies to the following versions of Splunk: 3.0 , 3.0.1 , 3.0.2 , 3.1 , 3.1.1 , 3.1.2 , 3.1.3 , 3.1.4 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!