Can Splunk DB Connect be deployed to a forwarder (with a bundled java executable) or does it need to run off a search head?
I could not get it to run on a UF. I installed a HF for it to run on. (HF is just a full install of splunk with the UI turned off).
I could not get it to run on a UF. I installed a HF for it to run on. (HF is just a full install of splunk with the UI turned off).
Yes, DB Connect will not work on a Universal Forwarder, but runs fine on a Heavy Forwarder, Search Head, or Indexer.