Deployment Architecture

Distributed environment

hainesa
Engager

When running distributed environment (separate indexers and Search Heads), where should this app be installed (indexer, search head, both)?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Without knowing the app in particular, here's some general guideline: Anything with inputs goes to forwarders, anything with indexes and sourcetypes goes to indexers, anything with dashboards and searches goes to searchheads.

If the app is not split up into an app and a technology add-on you may need to install it on both.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...