Install the Splunk Add-on for Cisco ISE

Use the tables below to determine where and how to install this add-on in a distributed deployment of Splunk Enterprise.

If you are not using a distributed deployment, or you need further instructions on how to install an add-on in your specific deployment environment, see the installation walkthroughs section at the bottom of this page for links to installation instructions specific to a single-instance deployment, distributed deployment, or Splunk Cloud.

Where to install this add-on

Unless otherwise noted, all supported add-ons can be safely installed to all tiers of a distributed Splunk platform deployment. See Where to install Splunk add-ons in Splunk Add-ons for more information.

This table provides a reference for installing this specific add-on to a distributed deployment of Splunk Enterprise.

Splunk instance type	Supported	Required	Comments
Search Heads	Yes	Yes	Install this add-on to all search heads where Cisco ISE knowledge management is required.
Indexers	Yes	Conditional	This add-on includes index-time operations and must be installed on either indexers or heavy forwarders.
Heavy Forwarders	Yes	Conditional	This add-on includes index-time operations and must be installed on either indexers or heavy forwarders.
Universal Forwarders	Yes	No	This add-on supports forwarders of any type for data collection.

Distributed deployment feature compatibility

This table describes the compatibility of this add-on with Splunk distributed deployment features.

Distributed deployment feature	Supported	Comments
Search Head Clusters	Yes	You can install this add-on on a search head cluster for all search-time functionality.
Indexer Clusters	Yes	You can install this add-on on an indexer cluster for all index-time functionality.
Deployment Server	Yes	Supported for deploying the configured add-on.

Installation walkthroughs

The Splunk Add-Ons manual includes an Installing add-ons guide that helps you successfully install any Splunk-supported add-on to your Splunk platform.

For a detailed walkthrough of the installation procedure, follow the link that matches your deployment scenario:

• Single-instance Splunk Enterprise
• Distributed Splunk Enterprise
• Splunk Cloud