I just completed building a clustered splunk environment. it currently includes a search, 2 indexers, a master node and universal forwarder. my question is- how do i install and configure apps within the cluster. specifically I am looking into the google maps plugin, probably twitter and several others. how is this done? do i install the app on the master and have it replicate to the nodes, or do i need to install the app on each server? ideally i think it would be spread out- the forwarder inputs the (example) twitter data, indexers store the data, search displays the data. how can i make sure the app functions properly like this?
... View more