I'm having issues deploying the Win Infrastruture App - "Key Value store must be enabled"
I have two Search Head Clusters (one for core Splunk one for ES). The Win Infrastructure App is working on my ES SH Cluster but not on my core SH Cluster.
My question is, do I need two KV Store, one per SH Cluster or is it one KV store shared by both SH Cluster?
Just wanted to understand this before I continue troubleshooting. Thanks
A related discussion at Is it possible to replicate the KV store between search heads that are neither pooled nor clustered?