Install the Splunk App for DSP

The Splunk App for DSP is packaged in the Splunk Data Stream Processor installation package provided by your Splunk representative.

1. If you have the DSP Health App installed in your Splunk DSP cluster, you must uninstall the app before you install the Splunk App for DSP. See Manage app and add-on objects for more information about uninstalling apps.
2. Locate the app, named splunk_app_dsp-<version>.tar.gz, in the root of the DSP installation package. This is the file that you'll install in the Splunk platform.
3. Identify where in your Splunk deployment you want to install the Splunk App for DSP. The Splunk Enterprise or Splunk Cloud instance must be able to search data on the indexers. While the app can be installed on any search head or search head cluster member, it is best practice to install the app to the same instance as the Splunk Monitoring Console. If you are unsure of where the Monitoring Console is, see Which instance should host the console? You must also install the Splunk App for DSP on your Splunk Indexers if you want to do index time processing and transforms.
4. Follow the steps listed on the topic matching your Splunk Enterprise or Splunk Cloud deployment. You can skip the Splunkbase steps because you already have the app package:
   • Single-instance Splunk Enterprise
   • Distributed Splunk Enterprise
   • Splunk Cloud