All Apps and Add-ons

What is the most preferred place to install DB Connect app ? Search Head or Heavy Forwarder ?

damode
Motivator

I am installing MS SQL Server Add-on. In the instructions, it mentions to install the DB Connect app on a Search head or Heavy Forwarder.
But I wish to know from least performance impacting perspective, which would be the best place to install ?
I am only interested in gathering the trace and audit logs, for which DB Connect app is required.

0 Karma

mayurr98
Super Champion

To use Splunk DB Connect in a distributed search environment, including search head clusters, you must determine the planned use cases. For ad hoc, interactive usage of database connections by live users, install the app on search head(s). For scheduled indexing from databases and output of data to databases, install the app on heavy forwarder(s).

For more info you can refer below link:
http://docs.splunk.com/Documentation/DBX/3.1.2/DeployDBX/Architectureandperformanceconsiderations#Di...

let me know if this helps!

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...