In our Splunk environment we have SHC, Indexer Cluster and Heavy Forwarders. We have the HEC port 8088 running only on the Heavy Forwarders.
The Documentation for this App is not very clear. Where do I install this App on i.e., on SHC/Indexer Cluster/Heavy Forwarders. Also this App requires HEC setup on the Splunk system, so where do I setup HEC.