On what instances in my search head and indexer clustering environment do I install these apps and add-ons?

[ishaanshekhar]

Dear SPLUNK Community,

In my SPLUNK architecture, I have a Search Head cluster, an Indexer Cluster, Heavy Forwarders, and Universal Forwarders.

Could you please help me identify on which of the above instance(s) should I install following apps?

1) Splunk Add-on for nix
2) Splunk App for nix
3) Splunk Add-on for windows
4) Splunk App for windows
5) Splunk DB Connect 1
6) Website Monitoring
7) Google Maps

Thank you!
Ishaan

[tskinnerivsec]

1. Each of the Splunk Add-on apps here would get deployed to all of your search head nodes as well as indexer nodes.
2. Splunk DB Connect, to my knowledge still isn't completely proven in a search head cluster, so it would be best to get this installed on a single search head server.
3. The rest of the apps you have listed all have visual components, and should get deployed to your search head cluster nodes.