I am configuring the Splunk App for Exchange, but in the document it is not clear on where to install the TA-SMTP-REPUTATION. I have 1xSearch Head, 1xIndexer and 1xHeavy Forwarder (all separate servers). Which one do I install it on?
Any of the above. I'd recommend the Heavy Forwarder, if it has Internet Access.
Hi @ahall [Splunk],
If you know the configuration instructions to install this add-on, can you please share it ?