Install the Splunk Add-on for McAfee Web Gateway

Use the tables below to determine where and how to install this add-on in a distributed deployment of Splunk Enterprise. See the installation walkthrough section at the bottom for links to installation instructions specific to a single-instance deployment, distributed deployment, Splunk Cloud, or Splunk Light.

Distributed installation of this add-on

This table provides a quick reference for installing this add-on to a distributed deployment of Splunk Enterprise.

Splunk instance type	Supported	Required	Comments
Search Heads	Yes	Yes	Install this add-on to all search heads where McAfee Web Gateway knowledge management is required.
Indexers	Yes	No	Not required because this add-on does not include any index-time operations.
Heavy Forwarders	Yes	No	Any kind of forwarder can be used. A forwarder does not need to be installed directly on the McAfee Web Gateway server.
Universal Forwarders	Yes	No	Any kind of forwarder can be used. A forwarder does not need to be installed directly on the McAfee Web Gateway server.
Light Forwarders	Yes	No	Any kind of forwarder can be used. A forwarder does not need to be installed directly on the McAfee Web Gateway server.

Distributed deployment compatibility

This table provides a quick reference for the compatibility of this add-on with Splunk distributed deployment features.

Distributed deployment feature	Supported	Comments
Search Head Clusters	Yes	You can install this add-on on a search head cluster for all search-time functionality.
Indexer Clusters	Yes
Deployment Server	Yes	Supported for deploying the configured add-on.

Installation walkthrough

See "Installing add-ons" in Splunk Add-Ons for detailed instructions describing how to install a Splunk add-on in the following deployment scenarios:

• single-instance Splunk Enterprise
• distributed Splunk Enterprise
• Splunk Cloud