All Apps and Add-ons

SolarWinds Add-on for Splunk

sh_tavousi
Explorer

I want to know where should we install "SolarWinds Add-on Splunk", I mean on deployment server, search head or indexers? Also I want to know if this Add-on can get logs like when they are sent from syslog server.

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Like most TAs, it should be installed on indexers so index-time properties and transforms can be used.  It should also be installed on search heads so search-time properties can be used.  Do NOT enable inputs in either instance type.

To use the inputs feature of the app, install it on a heavy forwarder.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Like most TAs, it should be installed on indexers so index-time properties and transforms can be used.  It should also be installed on search heads so search-time properties can be used.  Do NOT enable inputs in either instance type.

To use the inputs feature of the app, install it on a heavy forwarder.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!