Workday Add-on on Heavy Forwarder?

port7 · ‎06-26-2018

Can the Workday Add-On be deployed to a Heavy Forwarder?

I want to deploy this away from my main cluster due to network design, and so hoping to deploy this on a HF

richgalloway · ‎06-26-2018

From reading the installation instructions at https://splunkbase.splunk.com/app/3783/#/details, I conclude the add-on should be installed on a HF and not on indexers. You may also need to install it on your search heads if there are any search-time artifacts. If you do install on a SH, be sure to disable the inputs.

---
If this reply helps you, Karma would be appreciated.

Workday Add-on on Heavy Forwarder?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Join the Conversation

Workday Add-on on Heavy Forwarder?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Announcing Modern Navigation: A New Era of Splunk User Experience