What are best practices to install the Splunk App for AWS in a clustered environment?

[hemendralodhi]

Hello Splunkers,

We have to install splunk app for AWS in a distributed environment. I have read enough but not able to find best way to install the app in clustered environment. We have 2 search head , 2 indexer , 1 Cluster Master and 2 heavy forwarder.

Where should we install the application?

We can do in search head but then it need to index the data. If we do on both indexer then how data will be passed onto the search head.

Any insight is appreciated.

Thanks
Hemendra

[_d_]

A good way to deploy this would be the following:

• Install the Splunk App for AWS on the search head
• Install the Splunk Add-on for Amazon Web Services according to its Distributed Deployment manual. Which basically means just installing a copy on the search head (for its extractions and other search time knowledge) and installing and configuring a copy on the heavy forwarder for data collection and index-time operations.