All Apps and Add-ons

Where do I install the Splunk App for Web Analytics in a distributed search environment?

dangchuan
Engager

I have a search head, indexer, and several web servers and run as forwarders. Where do I install this app?

bandit
Motivator

I'd like to see an answer from the author on this as well. It's obvious that a lot of thought has been put into this app since it uses eventtypes, datamodels and kv stores. I would be great if @jbjerke_splunk could add this documentation for the targeting of components to a distributed Splunk environment.

Unarchiving the conf files in this app shows the following configs below. Right away I notice indexes.conf which usually means an index is being defined. For the most part, this means this config should reside on your indexers. It would be helpful to know if the props.conf and transforms.conf (and any other confs) also need to reside on both search head and indexers.

SplunkAppForWebAnalytics/default/savedsearches.conf
SplunkAppForWebAnalytics/default/ui-prefs.conf
SplunkAppForWebAnalytics/default/eventtypes.conf
SplunkAppForWebAnalytics/default/datamodels.conf
SplunkAppForWebAnalytics/default/inputs.conf
SplunkAppForWebAnalytics/default/app.conf
SplunkAppForWebAnalytics/default/indexes.conf
SplunkAppForWebAnalytics/default/transforms.conf
SplunkAppForWebAnalytics/default/collections.conf
SplunkAppForWebAnalytics/default/tags.conf
SplunkAppForWebAnalytics/default/macros.conf
SplunkAppForWebAnalytics/default/props.conf

lavanyaanne
Path Finder

You can install The Application on Indexer (or) Search head.Based on your Data Traffic you can choose any one.If you don't want to give more load to your Search head then indexer is good.

0 Karma
Get Updates on the Splunk Community!

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more with ITSI’s ...

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more! Faster Time to ValueManaging and ...

New Release | Splunk Enterprise 9.3

Admins and Analyst can benefit from:  Seamlessly route data to your local file system to save on storage ...

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...