Splunk-Apps
Splunk-Apps copied to clipboard
Installation Instruction Misleading Where to Install TA
The TA is not needed on Indexers if ingesting on a Heavy Forwarder. Installing on indexer causes error messages related to aperture, cortex xdr and minemeld settings missing.
:tada: Thanks for opening your first issue here! Welcome to the community!
Thank you for the information on the error messages. Closing this issue as we were told by Splunk Support to include the TA on indexers.