Hello Team i am using syslog for logs ingestion of solaris servers. I can see results for tcpdump host solarisServer. but logs are not visible on search head ... View more

Hello All, It is with reference to the Logs ingestion of IIS server. I  have universal forwarder installed on the IIS server and is getting windows log. I want to ingest IIS logs. have downloaded  https://splunkbase.splunk.com/app/3185  and installed on search head was referencing https://docs.splunk.com/Documentation/AddOns/released/MSIIS/Setupaddon but it is showing invalid directory and i am stuck. My questions is where all i have to install Add on only Search head because that was mentioned in Splunk document       ... View more