Install the Splunk Add-on for EMC VNX

Specific installation notes for this add-on

In a distributed deployment, install the Splunk Add-on for EMC VNX to your search heads and heavy forwarders.

This add-on does not support universal forwarders because the add-on requires Python.

The add-on does not need to be installed on indexers because it does not support universal forwarders, thus parsing occurs on the heavy forwarder rather than on indexers.

Note: You cannot use a deployment server to deploy the configured add-on to forwarders because the add-on uses modular inputs to collect data remotely. Using a deployment server to deploy configured add-ons to multiple forwarders results in duplicate data collection.

Installation walkthrough

Refer to "Installing add-ons" for detailed instructions describing how to install a Splunk add-on in the following deployment scenarios:

• single-instance Splunk Enterprise
• distributed Splunk Enterprise
• Splunk Cloud

Next, configure the modular input.