All Apps and Add-ons

On what instances in my search head and indexer clustering environment do I install these apps and add-ons?

ishaanshekhar
Communicator

Dear SPLUNK Community,

In my SPLUNK architecture, I have a Search Head cluster, an Indexer Cluster, Heavy Forwarders, and Universal Forwarders.

Could you please help me identify on which of the above instance(s) should I install following apps?

1) Splunk Add-on for nix
2) Splunk App for nix
3) Splunk Add-on for windows
4) Splunk App for windows
5) Splunk DB Connect 1
6) Website Monitoring
7) Google Maps

Thank you!
Ishaan

0 Karma

tskinnerivsec
Contributor
  1. Each of the Splunk Add-on apps here would get deployed to all of your search head nodes as well as indexer nodes.
  2. Splunk DB Connect, to my knowledge still isn't completely proven in a search head cluster, so it would be best to get this installed on a single search head server.
  3. The rest of the apps you have listed all have visual components, and should get deployed to your search head cluster nodes.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!