Where to install

This topic discusses the underlying requirements for running the Splunk Deployment Monitor App.

What versions of Splunk are supported?

You can run the Deployment Monitor App on any full Splunk instance, version 4.2 or later.

For information on installing Splunk, see the Installation Manual in the core Splunk product documentation.

Where to install the Deployment Monitor App

You can install and enable the Deployment Monitor app on any full Splunk instance, but it only really makes sense to install it on the search head, where the Deployment Monitor will have visibility into the entire deployment. Consider these typical deployment scenarios:

• One indexer with many forwarders sending data to it. Install the Deployment Monitor on the indexer only. When a deployment consists of a single indexer without a separate search head, the indexer doubles as the search head.

• One search head connecting to several indexers, each receiving data from many forwarders. Install the Deployment Monitor on the search head only.

• Multiple search heads. If you have multiple search heads and you have enabled search head pooling on them, you need to install the Deployment Monitor on only one search head. (It's best to enable search head pooling before enabling the Deployment Monitor.) If you install the Deployment Monitor on just a single search head without setting up pooling across all your search heads, you will see no or incomplete data, limited to the indexers communicating with that particular search head.

• Splunk cluster. Install the Deployment Monitor on the search head only.

Once you enable it on the search head, the Deployment Monitor will gather data about your entire deployment. In most cases, no further configuration is needed.

For information on Splunk deployments and the various components, such as search heads and forwarders, read the Distributed Deployment Manual in the core Splunk product documentation.