Installation¶

The Splunk App for Shared Alerting is available on Splunkbase

Dependencies¶

Both Enterprise Security (ES) and IT Service Intelligence (ITSI) with a shared Indexer or Indexer cluster

Location¶

This app can be used with either on premise or Splunk Cloud instances. The app has been tested against Splunk Enterprise/Cloud 9.0.x and greater.

Components¶

The app needs to be installed on both the Enterprise Security and IT Service Intelligence (ITSI) search head or search head cluster. These search heads need to share an indexer or indexer cluster.

Install¶

The app installs like any other app from Splunkbase. If you are installing in a Splunk Cloud environment, you can follow the Splunk Cloud app install directions.

If you are installing in an on premise instance, you can use the Install app from file feature in the Manage Apps page in Splunk Web to install the package, or install manually using the command line.