https://community.splunk.com/t5/Splunk-Enterprise-Security/Which-configs-go-on-the-indexer-and-which-go-on-the-search-head/m-p/160654#M661 <P>Why, yes there is an Install Manual.</P> <P><A href="http://docs.splunk.com/Documentation/ES/3.3.1/Install/Overview">http://docs.splunk.com/Documentation/ES/3.3.1/Install/Overview</A></P> <P>Read it through entirely before attempting an Install. ES is a tricky beast at times, and if you are new to ES or Splunk, you may want to contact Splunk PS.</P> Wed, 05 Aug 2015 14:00:55 GMT alacercogitatus 2015-08-05T14:00:55Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Which-configs-go-on-the-indexer-and-which-go-on-the-search-head/m-p/160653#M660 <P>For the Splunk App for Enterprise Security, Is there any documentation that will tell me which config files should go on the indexer and which should go on the search head in a distributed environment?</P> Tue, 04 Aug 2015 19:38:49 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Which-configs-go-on-the-indexer-and-which-go-on-the-search-head/m-p/160653#M660 jamesvz84 2015-08-04T19:38:49Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Which-configs-go-on-the-indexer-and-which-go-on-the-search-head/m-p/160654#M661 <P>Why, yes there is an Install Manual.</P> <P><A href="http://docs.splunk.com/Documentation/ES/3.3.1/Install/Overview">http://docs.splunk.com/Documentation/ES/3.3.1/Install/Overview</A></P> <P>Read it through entirely before attempting an Install. ES is a tricky beast at times, and if you are new to ES or Splunk, you may want to contact Splunk PS.</P> Wed, 05 Aug 2015 14:00:55 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Which-configs-go-on-the-indexer-and-which-go-on-the-search-head/m-p/160654#M661 alacercogitatus 2015-08-05T14:00:55Z