Has anyone does this yet? I am looking to see what pieces should be installed in the search pears and what pieces on the search head. Do I need to install the App twice (once on search head and once to search peers)?
So far I have a Windows Forwarder with the Windows TA sending data to Splunk Cluster. I can search the Windows data from the search head. However, when I use the Windows App, some of the widgets are not populating as expected. Also, the drop down are not populating.
Any ideas?
Never mind. I just had to be patient and wait for the lookup tables to build. Works as expected.
Never mind. I just had to be patient and wait for the lookup tables to build. Works as expected.
Hello!
Where is the Windows app installed if not on the search head?