Does this App actually work "as-is"? Installed in a Search Head cluster environment and then went through the files from the provided tar file. Specifically the file "commands.conf" references 4 python files
I assume you are referencing the https://splunkbase.splunk.com/app/2775/ app which is the TA-forwarderquery. I see that in this specific app it contains a forwarderquery.py in the bin directory of this TA.
This App is not created or supported by Splunk, but by someone who is a Splunk app developer, Dominique Vocat . You can reach out to them on the app page for additional support.