Has anyone does this yet? I am looking to see what pieces should be installed in the search pears and what pieces on the search head. Do I need to install the App twice (once on search head and once to search peers)?
So far I have a Windows Forwarder with the Windows TA sending data to Splunk Cluster. I can search the Windows data from the search head. However, when I use the Windows App, some of the widgets are not populating as expected. Also, the drop down are not populating.