How to install Proofpoint TAP modular input in the distributed environment.
how to configure the inputs.conf files
Please follow this guide:
https://splunkbase.splunk.com/app/3727/#/details
You should be installing this both on the search head and a heavy forwarder. You do not need to edit the conf file if you do this.
