We have the catchpoint app installed on a heavy forwarder in our distributed splunk deployment. We don't install appts that combine inputs and search head apps on our search heads, since it's bad practice to have inputs apps on the search heads. (Most vendors provide separate apps for each). How does one manually configure the Catchpoint Search app to ingest data. Do I simply need to configure the data in search_cp/default/catchpoint.conf?
... View more
The install instructions for the catchpoint search app are pretty minimal.
Where does the app need to be installed in a distributed deployment? Just the forwarding layer, or on the search heads as well?
Can this app be installed via a deploy server? More instructions would be appreciated.
... View more