Splunk Kafka Messaging Modular

[ajayvvs]

Can you let us know the procedure to intergrate Splunk with kafka broker .
Do we need to install the plugin under the splunk forwarder which is on the kafka server or do we need to install it on the splunk server itself. Splunk Kafka Messaging Modular Input v0.9.2b

1) Splunk 6.3 version
2) Kafka running on RHEL linux 6.7

[Damien_Dallimor]

You can install the Modular Input either locally or remotely to where your Zookeeper instance is.
Typically it is a better practice to install it on a Splunk Forwarder than directly on a Splunk Indexer