Hi,
We are trying to build the Splunk infrastructure on AWS, all the Splunk components will be kept in the Private subnet for security reasons.
We are planning to place the Search heads behind an ELB placed in the VPC subnets. Now my question is where do we place the ELB, should it be in the Public subnet or a private subnet and why?