Hi,
App For Stream works in our System Test environment perfectly where our universal forwarder connects to the search head to retrieve the App For Steam configuration.
Is there a way to manually configure Splunk_TA_stream without the connection from the UF to the SH?
Are there any config files we can use to deploy?
Thanks
David
Hi David,
No, Splunk_TA_stream requires a live connection to the App For Stream. App for Stream doesn't have to reside on the SH though - you can install it on any splunkweb instance - standalone, etc.
HTH,
Vladimir