Deployment Architecture

How to configure the PP TAP application in a clustered environment?

johnblakley
Explorer

Has anyone configured the PP TAP application in a clustered environment? I've been unable to find configurations to reference. We need to change the index the application sends to, add the API key information to the data input, and change the refresh times.

We have 3 search heads, and a deployment server. I'm tempted to just configure these manually on the SH themselves, and not worry about shcluster-bundle. I haven't found anything that tells me what files to modify so I can push them to the SH.

Thanks!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...