Install the Splunk Add-on for McAfee on the heavy forwarder
- Download the add-on from Splunkbase.
- From the Splunk Web home screen on your heavy forwarder, click the gear icon next to Apps.
- Click Install app from file.
- Locate the downloaded file and click Upload.
- If the forwarder prompts you to restart, do so.
Verify installation by finding the Splunk Add-on forMcAfee at
Install DB Connect on your heavy forwarder
Install the Splunk Add-on for McAfee in a single-instance Splunk Enterprise deployment
This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.3.0, 7.3.1, 7.3.2