Install the Splunk Add-on for Cisco ISE
Use the tables below to determine where and how to install this add-on in a distributed deployment of Splunk Enterprise.
If you are not using a distributed deployment, or you need further instructions on how to install an add-on in your specific deployment environment, see the installation walkthroughs section at the bottom of this page for links to installation instructions specific to a single-instance deployment, distributed deployment, or Splunk Cloud.
Where to install this add-on
Unless otherwise noted, all supported add-ons can be safely installed to all tiers of a distributed Splunk platform deployment. See Where to install Splunk add-ons in Splunk Add-ons for more information.
This table provides a reference for installing this specific add-on to a distributed deployment of Splunk Enterprise.
|Splunk instance type||Supported||Required||Comments|
|Search Heads||Yes||Yes||Install this add-on to all search heads where Cisco ISE knowledge management is required.|
|Indexers||Yes||Conditional||This add-on includes index-time operations and must be installed on either indexers or heavy forwarders.|
|Heavy Forwarders||Yes||Conditional||This add-on includes index-time operations and must be installed on either indexers or heavy forwarders.|
|Universal Forwarders||Yes||No||This add-on supports forwarders of any type for data collection.|
Distributed deployment feature compatibility
This table describes the compatibility of this add-on with Splunk distributed deployment features.
|Distributed deployment feature||Supported||Comments|
|Search Head Clusters||Yes||You can install this add-on on a search head cluster for all search-time functionality.|
|Indexer Clusters||Yes||You can install this add-on on an indexer cluster for all index-time functionality.|
|Deployment Server||Yes||Supported for deploying the configured add-on.|
The Splunk Add-Ons manual includes an Installing add-ons guide that helps you successfully install any Splunk-supported add-on to your Splunk platform.
For a detailed walkthrough of the installation procedure, follow the link that matches your deployment scenario:
Installation overview for the Splunk Add-on for Cisco ISE
Configure inputs for the Splunk Add-on for Cisco ISE
This documentation applies to the following versions of Splunk® Supported Add-ons: released