I have installed the App REST API Modular Input on Splunk Single Instance and is working fine. Does this App 1546 support Splunk Clustering Environment? We would like to deploy this on Splunk Search Head Cluster. Please help advise. Thanks.
I dont want to assume what your environment is... but it sounds like a distributed environment.
If this is the case, set up a single Heavy Forwarder to do the heavy lifting of ingest, send the information to your Index tier, and subsequently your SHC will be able to "see" it.
Hello there,
looks like you are asking regarding this app: https://splunkbase.splunk.com/app/1546/
will recommend to use this app on a Heavy Forwarder and not on Search Head Cluster.