Splunk App for Microsoft Exchange: Do you install TA-SMTP-REPUTATION on search head, indexer or heavy forwarder?

[davidts]

Hi,

I am configuring the Splunk App for Exchange, but in the document it is not clear on where to install the TA-SMTP-REPUTATION. I have 1xSearch Head, 1xIndexer and 1xHeavy Forwarder (all separate servers). Which one do I install it on?

Thanks,

David

[ahall_splunk]

Any of the above. I'd recommend the Heavy Forwarder, if it has Internet Access.

[damode]

Hi @ahall [Splunk],

If you know the configuration instructions to install this add-on, can you please share it ?

Thank you.
Dev