We have the catchpoint app installed on a heavy forwarder in our distributed splunk deployment. We don't install appts that combine inputs and search head apps on our search heads, since it's bad practice to have inputs apps on the search heads. (Most vendors provide separate apps for each). How does one manually configure the Catchpoint Search app to ingest data. Do I simply need to configure the data in search_cp/default/catchpoint.conf?
... View more