How should we install DB Connect in a distributed environment? We've read http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Otherdeploymentconsiderations but still aren't sure.
We have 2 search heads with search head pooling.
We have 3 indexers that are all receivers and search peers of the search heads.
We have 1 utility box we can dedicate to DB Connect.
We're not sure if it should be a search head (not pooled) or a heavy forwarder.
We think we'd like to make the utility box a heavy forwarder dedicated to DB Connect, but are there any downsides?
Can we then search the db connect data from our pooled search heads?
Will the db connect split across our 3 indexers be fully searchable?
Do we need to install anything on the search heads?
Also, we have 1 deployment server. From the docs, it looks like we would not use that to manage any DB Connect config. Is that right?
... View more