All Apps and Add-ons

I have installed this App on Splunk Single Instance and is working fine. Does this App 1546 support Splunk Clustering Environment? We would like to deploy this on Splunk Search Head Cluster. Please help advise. Thanks.

svvnarayanan123
New Member

I have installed the App REST API Modular Input on Splunk Single Instance and is working fine. Does this App 1546 support Splunk Clustering Environment? We would like to deploy this on Splunk Search Head Cluster. Please help advise. Thanks.

0 Karma

jtrujillo
Path Finder

I dont want to assume what your environment is... but it sounds like a distributed environment.

If this is the case, set up a single Heavy Forwarder to do the heavy lifting of ingest, send the information to your Index tier, and subsequently your SHC will be able to "see" it.

0 Karma

adonio
Ultra Champion

Hello there,
looks like you are asking regarding this app: https://splunkbase.splunk.com/app/1546/
will recommend to use this app on a Heavy Forwarder and not on Search Head Cluster.

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...