Deployment Architecture

How to configure the PP TAP application in a clustered environment?

johnblakley
Explorer

Has anyone configured the PP TAP application in a clustered environment? I've been unable to find configurations to reference. We need to change the index the application sends to, add the API key information to the data input, and change the refresh times.

We have 3 search heads, and a deployment server. I'm tempted to just configure these manually on the SH themselves, and not worry about shcluster-bundle. I haven't found anything that tells me what files to modify so I can push them to the SH.

Thanks!

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...