We have 3 indexers and 2 search heads and a deployment server. What are the best practices for installing DB connect in this environment. I did not see anything about distributed environment in DB Connect installation guide.
I would like to install DB Connect and use access oracle database for indexing as well as look up.
Do I need to install DB connect on all the boxes or just search heads?
Thanks,
There's some information in the docs: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Otherdeploymentconsiderations
For your specific environment, I'd recommend installing DB Connect on the search heads for Lookup, as well as a separate instance for indexing. The second one should preferably be a heavy forwarder (universal forwarder is not supported), but you can also install it on an indexer.