All Apps and Add-ons

Do we need to install this add-on on indexers?

shubham87
Explorer

Please let me know if we need to install this add-on on our indexers? I have already installed same on Heavy forwarders and search head

0 Karma

jbrocks
Communicator

Reading the description of the Addon it is said that it will map data to the CIM, which means it has at least a props.conf - so I would install the Addon on an Indexer OR Heavy Forwarder and - if it does not seem to work - I would also try to install the Addon on the Search Head. Did you get any data and new fields as you tried installing at a Search Head and a heavy Forwarder?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...