MQTT Modular Input with Splunk Cloud or Splunk Forwarder

[skochanski]

• Is it possible to install MQTT Modular Input in a Splunk Cloud instance? I wasn't able to do that in my Splunk Cloud Trial instance. Is it just a restriction for Trial accounts or is it restricted for any Splunk Cloud instance?
• Is it possible to install MQTT Modular Input app in SplunkForwarder?
• I was only able to get the MQTT Modular Input app working running in Splunk Enterprise and forwarding data to Splunk Cloud (Trial Account). Is that the recommended approach?

[Damien_Dallimor · Accepted solution]

You can install the MQTT Mod Input on Heavy Forwarder.
You can install the MQTT Mod Input on a Universal Forwarder, but you will need to install your own Python 2.7 runtime.
The MQTT Mod Input will certainly work in Splunk Cloud , but you will have to submit a request to have it installed.
Alternatively , as you mention , installing the MQTT Mod Input on a Forwarder and forwarding the data to Splunk Cloud is the recommended approach.