Should the Splunk App for ES Health Check be installed prior to Splunk Enterprise Security being installed?
Can it stay installed along side ES?
I was just reading the app description and wasn't completely clear.
You can install it prior to installing ES, but it doesn't have to be there first. You can keep it installed alongside ES. It mostly runs on searches so it shouldn't have much of a performance impact on the SH.