This repository was archived by the owner on Dec 14, 2024. It is now read-only.
Repository navigation
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I am in a situation where Im re-engineering alot of our splunk instance (splunk cloud)
We have the PA addon on our Heavy forwarder but it was never configured. We also have it on our SH again not configured.
So, Since the logs are currently going through our heavy forwarder via a syslog (universal forwarder) do I configure the Addon on (account, log lvl etc.) on Just the heavy forwarder or do I need to duplicate that config in the addon on our search head?
Note only the app is installed on both our regular splunk SH and our ES search head.
All reactions