product
service
- Simple Security Consulting [Consulting]
- Splunk SOAR Automation Assessment Service [Consulting]
- Dashboard/SPL Creation Pack [Implementation/Building Support]
- Version upgrade service [implementation and construction support]
- Splunk Premium Apps construction support service [implementation and construction support]
- Splunk Security Log Analysis Start Package [Original App/Service]
- Splunk × CrowdStrike Falcon Insight, Macnica Original App [Original App/Service]
- Government uniform standard compatible App [Original App/Service]
- Smart Security Monitoring App [Original App/Service]
- Splunk × LANSCOPE Original App [Original App/Service]
- Security Monitoring App for Box [Original App/Service]
- Cloud Security Monitoring App [Original App/Service]
- SIEM Operation Monitoring Service [Original App/Service]
- List of services
- Macnica Premium Support for Splunk (utilization support, version upgrade monitoring)
- Macnica Premium Support for Splunk Skill Up Package
Specifications/Technical Information
Application for evaluation machine
- FAQ
How to change IP address and host name
- release date
- 2016-12-13
- last updated
- 2023-12-01
- version
- Splunk Enterprise 9.0.4
- Overview
- Changes and procedures when changing the IP address or host name
- Reference information
-
- Forwarder transfer settings
- Configuring Distributed Search
- Deployment server/client configuration
- License settings
- https://docs.splunk.com/Documentation/Splunk/9.0.4/Admin/Serverconf#License_manager_settings_for_configuring_the_license_pool.28s.29
- https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/PropagateSHCconfigurationchanges#Point_the_cluster_members_to_the_deployer
- https://docs.splunk.com/Documentation/Splunk/9.0.4/Admin/Configurealicensepeer
- Search head clustering settings
- https://docs.splunk.com/Documentation/Splunk/9.0.4/Admin/Serverconf#search_head_clustering_configuration
- https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/PropagateSHCconfigurationchanges#Point_the_cluster_members_to_the_deployer
- https://docs.splunk.com/Documentation/Splunk/9.0.4/DistSearch/Staticcaptain
- content
-
Describes settings that are affected when the IP address or host name of the Splunk server is changed, and how to change them.
Change procedure
The change procedure is as follows.
procedure
- Stop the Splunk service
- Change IP address, change Splunk settings
- Start the Splunk service
*In the case of a cluster environment, stop according to the stop order in the cluster environment.
*If you are using a forwarder, stop the indexer after stopping the forwarder, and then start the forwarder after the indexer has finished starting.
Settings affected
If you want to change the Splunk server name and default host name settings, change the settings below.
Splunk server name
- conf file name: $SPLUNK_HOME/etc/system/local/server.conf
- Stanza name: general
- attribute name: serverName
Setting Example)
[general]
serverName = myhostname1Default hostname
- conf file name: $SPLUNK_HOME/etc/system/local/inputs.conf
- Stanza name: default
- attribute name: host
Setting Example)
[default]
host = myhostname1Changing the Splunk hostname or IP address will affect the following settings: Please change the corresponding settings.
- Forwarding destination setting of Splunk forwarder
- Configuring Distributed Search Peer Nodes
- Destination server class setting of the deployment server
- Deployment server settings for the deployment client
- Setting up the indexer for the pool of license masters
- License slave master URI setting
- Setting the management URI for search head cluster members
- Setting the Deployer URL for a Search Head Cluster Member
- Configuring static captains for search head cluster members
- DMC settings
- Transfer destination settings for network devices (syslog, etc.)
- Monitoring destination settings using monitoring tools (ping, process startup status monitoring, etc.)
that's all
In charge of Macnica Splunk Co., Ltd.
- TEL：045-476-2010
- E-mail：splunk-sales@macnica.co.jp
Mon-Fri 8:45-17:30
