All Apps and Add-ons

Do we need to install this add-on on indexers?

shubham87
Explorer

Please let me know if we need to install this add-on on our indexers? I have already installed same on Heavy forwarders and search head

0 Karma

jbrocks
Communicator

Reading the description of the Addon it is said that it will map data to the CIM, which means it has at least a props.conf - so I would install the Addon on an Indexer OR Heavy Forwarder and - if it does not seem to work - I would also try to install the Addon on the Search Head. Did you get any data and new fields as you tried installing at a Search Head and a heavy Forwarder?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...