How to install Proofpoint TAP modular input in the distributed environment.
how to configure the inputs.conf files
Please follow this guide:
You should be installing this both on the search head and a heavy forwarder. You do not need to edit the conf file if you do this.