Can the Workday Add-On be deployed to a Heavy Forwarder?
I want to deploy this away from my main cluster due to network design, and so hoping to deploy this on a HF
From reading the installation instructions at https://splunkbase.splunk.com/app/3783/#/details, I conclude the add-on should be installed on a HF and not on indexers. You may also need to install it on your search heads if there are any search-time artifacts. If you do install on a SH, be sure to disable the inputs.