All Apps and Add-ons

Installation Location for Health Check

sloshburch
Ultra Champion

Given that the app needs other instances to be peers for it to do a health check of them, is it fair to conclude that the DMC instance is a good candidate of where to deploy/install this app? Any other places (indexers, SHs) this app needs to be installed to properly collect data?

0 Karma
1 Solution

aaronkorn
Splunk Employee
Splunk Employee

Yes, toss it on the a host running the DMC since it has access to all the remote hosts, considering the DMC is setup correctly. The future release of the app requires it to be installed on the same host as the DMC as we use the assets.csv and splunk_search_group in our rest searches to filter results.

View solution in original post

aaronkorn
Splunk Employee
Splunk Employee

Yes, toss it on the a host running the DMC since it has access to all the remote hosts, considering the DMC is setup correctly. The future release of the app requires it to be installed on the same host as the DMC as we use the assets.csv and splunk_search_group in our rest searches to filter results.

Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...