From reading the installation instructions at https://splunkbase.splunk.com/app/3783/#/details, I conclude the add-on should be installed on a HF and not on indexers. You may also need to install it on your search heads if there are any search-time artifacts. If you do install on a SH, be sure to disable the inputs.
--- If this reply helps you, Karma would be appreciated.
