Splunk for Windows on a Splunk Cluster

[agodoy]

Has anyone does this yet? I am looking to see what pieces should be installed in the search pears and what pieces on the search head. Do I need to install the App twice (once on search head and once to search peers)?

So far I have a Windows Forwarder with the Windows TA sending data to Splunk Cluster. I can search the Windows data from the search head. However, when I use the Windows App, some of the widgets are not populating as expected. Also, the drop down are not populating.

Any ideas?

[agodoy · Accepted solution]

Never mind. I just had to be patient and wait for the lookup tables to build. Works as expected.

[jbernt_splunk]

Hello!

Where is the Windows app installed if not on the search head?