topic Which server is Splunk app installed on? in Dashboards & Visualizations

Which server is Splunk app installed on?

nainikaaleti — Wed, 14 Nov 2018 22:13:25 GMT

I work for Catchpoint. One of our clients wants to know which server they need to install Catchpoint Splunk app on?
They are running Splunk in a distributed enterprise setup.
I have attached an Image of their current setup.

Re: Which server is Splunk app installed on?

pruthvikrishnap — Wed, 14 Nov 2018 23:14:28 GMT

I am not able to see the Image, in general apps are installed on one Search head and can be used in distributed enterprise setup.

Re: Which server is Splunk app installed on?

DavidHourani — Wed, 14 Nov 2018 23:24:09 GMT

Hi There,

Please have a look at the app :
https://splunkbase.splunk.com/app/3223/#/details

This app contains visualizations and modular inputs for gathering data. Which means it has been split over the distributed deployment:

On the Heavy Forwarder you will have the modular input fetching the data.
On the Search Head you will have the visualisation app.
On the indexer you will have the index configuration for storing the data.

Cheers,
David