Deployment Architecture

How to configure the PP TAP application in a clustered environment?

johnblakley
Explorer

Has anyone configured the PP TAP application in a clustered environment? I've been unable to find configurations to reference. We need to change the index the application sends to, add the API key information to the data input, and change the refresh times.

We have 3 search heads, and a deployment server. I'm tempted to just configure these manually on the SH themselves, and not worry about shcluster-bundle. I haven't found anything that tells me what files to modify so I can push them to the SH.

Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...