Splunk-Apps icon indicating copy to clipboard operation
Splunk-Apps copied to clipboard

Installation Instruction Misleading Where to Install TA

Open arcuseagles opened this issue 3 years ago • 1 comments

The TA is not needed on Indexers if ingesting on a Heavy Forwarder. Installing on indexer causes error messages related to aperture, cortex xdr and minemeld settings missing.

arcuseagles avatar Aug 24 '22 22:08 arcuseagles

:tada: Thanks for opening your first issue here! Welcome to the community!

Thank you for the information on the error messages. Closing this issue as we were told by Splunk Support to include the TA on indexers.

paulmnguyen avatar Oct 02 '23 16:10 paulmnguyen