Hi,
I have just installed the Lookup FIle Editor in one of our search heads in Splunk Cloud. It's seems to be ok but I want to know if it needs also to be installed in other Splunk components, like the forwarder?
Thanks in advance!
No!
its for editing lookups, there arent supposed to be any lookups needs editing on anything but a Search Head ...