https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191608#M23551 <P>It actually would go on both, on the indexer for capture of data from universal forwarders and on search heads for field extraction.</P> Mon, 17 Mar 2014 20:50:36 GMT sbrant_splunk 2014-03-17T20:50:36Z https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191606#M23549 <P>Hello,<BR /> Does this TA get installed on the Indexer or the Search Head?</P> Mon, 17 Mar 2014 20:25:45 GMT https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191606#M23549 lbogle 2014-03-17T20:25:45Z https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191607#M23550 <P>Both, <BR /> This add-on provides the index-time and search-time knowledge for system log data from Cisco ASA etc..</P> Mon, 17 Mar 2014 20:50:19 GMT https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191607#M23550 aelliott 2014-03-17T20:50:19Z https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191608#M23551 <P>It actually would go on both, on the indexer for capture of data from universal forwarders and on search heads for field extraction.</P> Mon, 17 Mar 2014 20:50:36 GMT https://community.splunk.com/t5/Deployment-Architecture/does-the-Cisco-ASA-TA-get-installed-on-the-indexer-or-the-search/m-p/191608#M23551 sbrant_splunk 2014-03-17T20:50:36Z