Let us do a lab exercise of renaming.
The Hostname of Splunk from all these four locations.
For example, year one the system local we will name.
Or Splunk, ATC, the VA command or the VA.
Ed I'll be using throughout this tutorial or following up tutorials for editing the configuration.
If you're not familiar with VA, you can use any other editors like G edit, which has a graphical and
also nano, which is similar to VA.
And also you can use venous app or other FTP tools to download this configuration edit in your windows
compatible environment, then upload it to server.
So throughout this tutorial I'll be using via editor.
Let me quickly get into system local directory, which is the highest priority.
I'll be editing a configuration file called.
Inputs.
As you can see, this is the file I'll be editing under system local.
I'll just rename the host so that we'll be able to see how the configuration works.
I'll just give it a value host under system.
Local so that when we see this entry in the Splunk logs will come to know it has picked up the logs
from this location.
That will be our system local.
I learned the same information with different values in one of the apps.
That is a search local.
Input start conf.
So this is the app's local directory which has the second highest priority.
I'll copy the same content, I'll modify a little so that for our understanding, it will be better.
So this is our app's local directory.
I'm opening a PDF file and pasting the same contents, but I'll change this system to.
App local so that we know if the this host value is picked up it means the configuration has been picked
up by our second highest.
Pretty.
Let me go to apps.
Default.
Same app.
It will be search default.
Input taken.
I'll change here.
App default.
I'll save and close this file now.
Ready ed system local the hostname configuration app local hostname configuration and.
App default hostname configuration.
Let us restart our Splunk instant
Splunk bin, the Splunk utility and hit restart.
Let us try to log into our Splunk.
By the time it restarts.
Let us see.
Is it done?
Yes, it is done.
Let us.
So it has successfully restarted.
Let me log in.